1. Who We Are

We are a small team currently developing an AI-powered chatbot to help individuals and businesses better understand UK VAT compliance — such as VAT registration requirements, reporting basics, and common questions.

While we are not yet formally registered as a legal entity, we operate under the working name "Symanty" and can be contacted at: 📧team@symanty.com

2. What This Notice Covers

This Privacy Notice explains how we handle personal data when you interact with our chatbot, currently accessible via WhatsApp. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR).

3. What Data We May Collect

We do not request or require personal data. However, because our chatbot accepts free-form questions, you may choose to share:

• Your name
• Business name or VAT number
• Email address or phone number
• Any other personal or sensitive information you voluntarily enter

We also automatically collect:

• Message content (for quality, analytics, and debugging)
• Timestamp of messages
• Metadata from WhatsApp (e.g. phone number, delivery status)

4. Legal Basis for Processing

We rely on the following legal bases:

• Legitimate interest: to improve our service and ensure functionality of the chatbot.
• Consent: by initiating the chat, you consent to our processing of your message content for the purposes described here.

5. How We Use Your Data

We only use the data:

• To respond to your chatbot queries
• To improve our chatbot’s performance and accuracy
• To detect errors or misuse

We do not use your data for:

• Marketing
• Profiling
• Selling to third parties

6. How Long We Keep Your Data

Chat logs are retained for a maximum of 30 days, unless we are legally required to keep them longer (e.g., in case of abuse reports). After that, logs are automatically deleted.

7. Who We Share Data With

Your messages may be processed through the following providers, all of whom are GDPR-compliant:

We ensure all partners have appropriate Data Processing Agreements (DPAs) in place.

8. Data Transfers Outside the EEA

Some of our providers may process data outside the European Economic Area (EEA) (e.g. in the USA). In these cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or equivalent.

9. Your Rights

Under GDPR, you have the right to:

• Request access to your data
• Request correction of inaccurate data
• Request deletion ("right to be forgotten")
• Restrict or object to processing
• Lodge a complaint with a supervisory authority

To exercise these rights, contact us at: 📧team@symanty.com

10. How to Contact Us

If you have any questions about this Privacy Notice or your data rights, please contact us at:📧team@symanty.com

11. Updates to This Notice

We may update this notice as we evolve. If changes are significant, we will inform you via chatbot or website. The date of last update is shown at the top.