KVKK, GDPR and Personal Data

HaveAI offers tools to access your account data, export certain records and forward requests about personal data. This page explains the scope of these tools and the roles of your business and HaveAI in data processing.

What Role Do Your Business and HaveAI Have?

Your business decides what information it collects from its customers and for what purposes it uses this information. HaveAI processes the data in customer conversations to provide the service, in line with your business's instructions.

The data HaveAI processes for its account management, billing, support and its own service security is explained separately under the Privacy Policy.

For this reason, there can be two different requests:

A request about your HaveAI account: is forwarded to HaveAI.
A request from your business's customer about their own data: is handled primarily by your business. If you need help with the records HaveAI processes, you can request support from HaveAI.

Data Processing Agreement

The Data Processing Agreement (DPA) regulates the terms for the personal data HaveAI processes on behalf of your business and the responsibilities of the parties. Acceptance of the DPA is requested during registration.

Make the necessary disclosures for the information you will collect, its purposes of use and connected services, and determine the appropriate legal basis. For operations requiring explicit consent, obtain the consent separately. Accepting an agreement does not mean your customers have consented to all data processing activities.

Export Account Data

Data & Privacy

Open Settings → Data & Privacy in the panel.

Choose a format

In the data export area, choose the JSON or ZIP option.

Wait for the download

Wait for the file to download.

Check

Keep the file in a safe place and check its content before use.

JSON presents the records as structured text. ZIP brings together different record types as separate JSON files.

The scope of the export package is as follows:

Record type	Scope
Account profile	Certain profile and consent information about the account
Bot information	Bot records connected to the account and related settings
Messages	The last 10,000 messages
Sign-in history	The last 100 sign-in records
Personal data masking records	Up to 1,000 processing records, if any

This package is not specific to a single customer

This operation exports certain records across the account. It does not create a data file specific to a single customer. When responding to a customer's request, do not send this package directly; it may contain information belonging to other people and to your business.

If you have a more comprehensive data request or need help with records belonging to a specific person, contact the support team.

Make a Request About Your Personal Data

You can forward your requests about the processing of your personal data — such as information, access, correction or deletion — to [email protected]. Explain clearly which account or operation your request concerns. Additional information may be requested to verify your identity and the scope of the request.

When you use HaveAI's request form, keep the request number provided. Use this number in your later correspondence. Follow the tracking information in the request confirmation.

For requests from your business's customers, first determine the identity of the relevant person and which records they request. Prepare the records appropriate to the request without sharing other people's data. If you need to contact HaveAI support, forward only the information necessary for the operation.

Deletion Request, Account Closure and Subscription Cancellation

These operations serve different purposes:

Personal data deletion request: a request for the deletion of certain personal records.
Account closure: the operation for ending the use of the HaveAI account. It can be started from the account deletion area in Settings → Data & Privacy.
Subscription cancellation: stops the renewal of the paid subscription; it is not an account deletion on its own.

Before closing the account, export the records you need and read the on-screen descriptions. The retention and deletion of data is evaluated according to the relevant data type and applicable obligations. For details, review the Privacy Policy and the DPA.

Personal Data Masking

HaveAI's personal data detection component can recognize and mask certain formats such as an ID or card number. Masking helps reduce unnecessary data visibility; it does not replace a data deletion request.

Adjust customer information collection fields to your purpose. Limit yourself to the information sufficient for an appointment or a follow-up. Do not request a card security code, password or personal information not needed for your work over chat.

Widget, Cookies and Disclosure

When you add the HaveAI widget to your website, explain to your visitors what information is collected during the chat and for what purpose it is used. Make sure your privacy and cookie texts are consistent with the actual use on your site. Handle the required consents within your own site's consent management.

HaveAI's Cookie Policy explains HaveAI's own use. It does not replace the disclosure specific to your business's site.

Zernio and Other Service Providers

Infrastructure, AI and messaging providers take part in HaveAI's service delivery. The services used can change according to the channel you connect and the operation you perform.

Zernio is used for Meta channel connections. Zernio mediates the delivery of messages between HaveAI and Meta channels. When you use the channel, the relevant message content and the user information needed for communication are processed in this flow.

For the providers' roles and data processing terms, review the Subprocessors page and the DPA text.