Privacy and AI conversations

Controller and contact

The controller is R Herman, trading as SeniorCareVille, United Kingdom. Email hello@seniorcareville.org for access, correction, deletion, restriction, portability or an objection. We may need to verify your identity. You can complain to the UK Information Commissioner’s Office or your relevant supervisory authority. Correspondence address: c/o Accountancy 4 You Ltd, 68–70 Market Street, Hyde, SK14 1ES, United Kingdom

We use necessary service data to provide the requested conversation or purchase, security data for our legitimate interest in preventing abuse, and transaction records for legal and accounting obligations. We do not use chat messages for advertising or ask for health records. Please keep sensitive information out of the chat.

Messages and AI processing

The current public site has no SeniorCareVille account registration or file upload. Chat accepts messages up to 1,000 characters. When you start and send a message, your text, a short conversation history and the fictional character’s information are sent to OpenAI to generate and check a reply. Please do not submit personal, medical, financial or third-party information. The application requests store=false, which does not eliminate provider security or abuse-monitoring retention.

Conversation storage and clearing

The visible transcript and signed continuation token remain in the current tab’s memory, not in localStorage or an account database. The token carries a short recent history and is valid for 30 minutes. Clear chat removes the selected room’s transcript and token. End conversation also stops further sends until you restart. Refreshing clears the tab’s conversation history. These actions do not delete records already held by service providers or cancel processing of a request already sent.

Service protection

A necessary chat cookie lasts up to 24 hours. Usage counters contain random session identifiers, counts and daily keyed network hashes, not conversation text or raw network addresses. Counter expiry is at most two days; expired rows are removed during subsequent successful quota checks. Hosting and AI providers may keep their own security records. Provider locations, transfer safeguards and retention details: processing depends on provider configuration; no regional-residency or zero-retention guarantee is made.

Digital purchases

Stripe receives payment and billing details. SeniorCareVille does not receive card numbers or wallet credentials. We retain order reference, hashed browser identity, item, character, amount, currency, status and Stripe session reference to fulfil and support purchases. These records remain available for purchase support and legal record-keeping; contact us about deletion of a specific record. Billing addresses are not copied into our order database.

For email recovery, the address you submit is compared with the checkout email held by Stripe. When automatic recovery is available, an authenticated mail service delivers a private, single-use link. We store its hash, order reference and expiry, not the raw token or email address. The link expires after 15 minutes; expired records are removed on subsequent recovery requests. If automatic recovery is unavailable, the form directs you to email support.

Aggregate statistics

Application statistics count selected public-page, conversation and purchase events by UTC day. They do not use analytics cookies, visitor profiles, conversation text, raw IP addresses or arbitrary query values. Approved campaign codes remain in the current tab and may accompany checkout metadata. Do Not Track and Global Privacy Control disable client recording and exclude marked new checkouts from purchase analytics. Aggregate records older than 365 days are removed on subsequent recording. These counts are separate from purchase records and hosting security logs.

Campaign labels may include a bounded source, medium and campaign code. Never put a person’s name, email or sensitive information in a campaign URL. Financial reporting records verified gross amounts and successful refunds separately by currency, market, character, item and live/test mode. These tax-inclusive amounts are before provider fees and are not profit or payouts. Optional campaign attribution is removed for opted-out checkouts; essential order accounting remains. Only the owner can access the database reports. Refund dates use the provider’s refund-creation date, and pending or failed refunds are excluded from completed-refund totals.

To check that the correct AI notice is displayed, we keep daily totals for compact, full and unknown notice decisions, grouped by UK calendar day. These operational counts contain no country code, page address, visitor identifier or chat content. They count page responses, not unique visitors, and may include automated requests. Records older than 365 days are removed during subsequent recording.

Providers and international processing

OpenAI generates and moderates AI replies. Stripe and, where applicable to the transaction, Link process payments under their own notices and terms. Cloudflare and the hosting platform provide infrastructure and security. Email support is forwarded from hello@seniorcareville.org to the operator’s support inbox. These providers may process data outside the UK or EEA. Their published privacy, processing and transfer terms apply; we do not promise UK-only processing or zero provider retention. Ask hello@seniorcareville.org about your data or the safeguards relevant to your request.