Widget Privacy Notice

This Widget Privacy Notice describes the data collection and processing practices of Skode Technologies Private Limited ("Skode," "we," "us," or "our"), a private limited company incorporated in India with registered office at Thirumangalath, Chelavur, Kozhikode – 673571, Kerala, India, when you interact with a Skode-powered chat widget, contact form, click-to-WhatsApp button, or other embedded component ("Widget") on a third-party website. The Widget is provided by Skode as part of the Skode Flow messaging platform, which businesses use to communicate with their own website visitors.

This notice applies to you as a website visitor interacting with the Widget. The business that has installed the Widget on their website is the data controller for the data collected through the Widget. Skode acts as a data processor on that business’s behalf under the terms of our Data Processing Agreement. As an end-user interacting with the Widget on that website, you are a data subject of the business — not of Skode. Your primary relationship for privacy rights is therefore with the business operating the website; see § 8 below for how rights requests are handled.

Skode does not use Widget data for its own marketing, analytics, or business intelligence unrelated to providing the Widget. Data collected through the Widget is processed solely on behalf of, and at the instruction of, the business that installed it. See our Privacy Policy, Cookie Policy, Consent Policy, and Sub-Processors page for further detail.

1. Data Collected Through the Widget

When you interact with a Skode Widget on a third-party website, the following data may be collected:

1.1 Data You Provide

• Contact Information: Name, email address, and phone number if you choose to provide them (e.g., in a pre-chat form or during a conversation).
• Messages: The content of messages you send through the Widget, including text, images, and files you share.
• Form Submissions: Any data you enter into forms displayed within the Widget (e.g., contact forms, survey responses, feedback forms).

1.2 Data Collected Automatically

• Device Information: Browser type and version, operating system, screen resolution, and device type (desktop/mobile/tablet).
• Network Information: IP address (which may be used to determine approximate geographic location at the city level).
• Page Information: The URL of the page where you interacted with the Widget, referring page URL, and the time spent on the page.
• Interaction Data: Whether you opened the Widget, the number of messages sent, response times, and conversation status.
• Visitor identifier: A randomly generated unique identifier stored in a first-party cookie on the customer’s own website domain, used to provide conversation continuity within that single website. Skode does not use this identifier to track you across different customers’ sites, and it is not linked to any cross-site profile.

2. Cookies and Local Storage

The Skode Widget uses the following cookies and local storage:

The Widget does not set any third-party advertising or marketing cookies. All cookies set by the Widget are first-party cookies scoped to the domain of the website you are visiting. Those cookies are governed by that website’s own cookie policy and cookie-consent banner — not Skode’s. The business operating the website is the controller for those cookies and is responsible for obtaining your cookie-consent in line with the EU ePrivacy Directive (2002/58/EC), UK PECR, or equivalent local law.

If you are a business deploying a Skode Widget, you must disclose the Widget in your own privacy policy (including the fact that Skode acts as your data processor for data captured through the Widget), include the Widget in your cookie banner where consent is required, and ensure your Widget integration honours any user opt-out or Global-Privacy-Control signal your site exposes.

3. How Data Is Used

Data collected through the Widget is used to:

• Enable real-time conversation between you and the business that operates the website.
• Maintain conversation history so you can continue conversations across visits.
• Route your messages to the appropriate team member or department within the business.
• Provide the business with analytics about Widget usage (aggregate, non-personal data).
• Improve the Widget's performance, reliability, and user experience.
• Detect and prevent abuse, spam, and fraudulent activity.

4. Data Sharing

• With the Business: All data collected through the Widget is shared with the business that installed the Widget. The business determines how your data is used within their CRM and messaging systems.
• With Skode: Skode processes data on behalf of the business as a data processor under a Data Processing Agreement.
• Sub-Processors: Skode uses sub-processors for hosting and infrastructure. See our Sub-Processors page for details.
• No Advertising: We do not sell or share your data with advertisers or advertising networks. Data collected through the Widget is never used for advertising purposes by Skode.

5. Data Storage and Retention

• Location: Data is stored on secure servers operated by our hosting providers. See our Sub-Processors page for hosting locations.
• Encryption: All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
• Retention: Conversation data is retained for as long as the business maintains an active Skode account. Upon account termination, Widget data is deleted within 90 days.
• Local Data: Data stored in your browser's local storage and cookies can be cleared at any time through your browser settings.

6. Opt-Out Options

You can control data collection by the Widget in the following ways:

• Do Not Interact: The Widget does not collect data until you interact with it (click to open, send a message, or submit a form). Simply not engaging with the Widget prevents data collection beyond the visitor identifier cookie.
• Clear Cookies: You can delete the Widget's cookies and local storage through your browser settings. This removes your visitor identifier and resets the Widget.
• Browser Privacy Settings: You can block third-party scripts through your browser settings or browser extensions to prevent the Widget from loading entirely.
• Data-deletion request: Contact the business that operates the website in the first instance — that business is the data controller and is responsible for fulfilling your request. The business can instruct Skode, through the Data Processing Agreement, to delete widget data associated with you; Skode will action those instructions in line with the retention and deletion timelines set out in that agreement and in our Data Deletion Policy.

7. Your Privacy Rights

Depending on your location, you may have the right to access, rectify, delete, restrict, or port your personal data, or to object to its processing, under the GDPR, UK GDPR, California CCPA/CPRA, the Indian Digital Personal Data Protection Act 2023, or other applicable law. Because the business that installed the Widget is the data controller, privacy-rights requests should be directed to that business. If you cannot identify or reach the business, you may contact Skode at privacy@skode.ai and we will help you identify the relevant controller and route your request.

For more information, please refer to our Privacy Policy.

8. Children's Privacy

The Widget is not directed at children under 16 years of age. We do not knowingly collect personal data from children through the Widget. If you believe a child has submitted personal data through the Widget, please contact us at legal@skode.ai.

9. Changes to This Notice

We may update this Widget Privacy Notice from time to time. The updated notice will be posted on this page with a revised effective date. We encourage you to review this notice periodically.

10. Contact Us

For questions about this Widget Privacy Notice:

• Email: legal@skode.ai
• Privacy Policy: View our Privacy Policy