Skip to content

RosettaChat Privacy Policy

Effective October 17, 2026.

Who we are and how to contact us

RosettaChat provides multilingual messaging and customer-support tools, including its website, web dashboard, mobile companion application and embeddable chat widget. RosettaChat is operated by AlphaBlue Thailand, referred to as “we” in this policy.

For privacy questions, access or deletion requests, contact [email protected]. If you cannot reach that address, contact [email protected].

When an organization uses RosettaChat for its own Workspace or website support, that organization controls the purposes for which it collects its customers’ and members’ information. Its own privacy notice may also apply. Contact that organization about its use of your information; we can assist with requests concerning our service.

Information we process

Why we use information

We use this information to authenticate users, deliver and store conversations and files, provide translation and support features when authorized, send requested service notifications, maintain billing and credit records, protect the service against abuse, diagnose failures and respond to support or privacy requests.

Where local law requires a legal basis, we rely on the basis applicable to each purpose, including performing our service contract, consent for optional processing where required, legitimate interests in operating and securing the service, and compliance with legal obligations. These purposes do not authorize unrelated marketing or disclosure.

AI translation, support Bot and third-party services

AI features can send message text and language instructions to OpenRouter, which routes requests to the configured model provider, currently OpenAI for the Luna model route. Support Bot requests can also include relevant conversation history and the Workspace’s Bot instructions or selected knowledge excerpts. If the Workspace enables Marknest RAG, the visitor’s question can be sent to Marknest to retrieve relevant business knowledge; retrieved excerpts can then be included in the AI request.

Messages may contain names or other personal information even when RosettaChat does not add your account email to an AI request. AI output can be inaccurate. Review important translations or answers and avoid including unnecessary sensitive information.

Before enabling AI processing of your messages, we explain the information and recipients and ask for explicit permission. You can decline and use original-text chat, or withdraw permission in the AI/privacy settings. Workspace administrators cannot grant permission on behalf of individual signed-in members merely by enabling translation. An organization supplying messages through an integration is responsible for obtaining the necessary authority and permissions for the people whose information it supplies.

For Workspaces you own, this permission also controls AI processing of the Workspace’s Bot instructions and knowledge context. AI Bot replies require both the Workspace owner and the visitor to allow AI processing; original-text human support remains available.

Withdrawal prevents new requests based on your permission. It does not recall a request already sent, erase copies held by another conversation participant, or automatically remove previously generated translations. Messages sent without permission are not retroactively sent to AI merely because you enable the feature later. A change to disclosed processing requires an updated consent version.

Provider processing and retention are governed by the applicable provider terms and account configuration. We do not promise that every provider retains nothing, that every request remains in a single country, or that all provider services have identical training policies. Review the relevant provider notices: OpenRouter, OpenAI, and the Marknest notice supplied by the relevant Workspace/operator.

Other recipients

We do not use the mobile app for cross-app advertising tracking or sell personal information as part of the service described here.

Security and international processing

We use access controls and transport encryption, and encrypt stored chat content and attachments using server-managed keys. This is not end-to-end encryption: the service can decrypt content for authorized delivery and AI processing. No system can guarantee absolute security.

We and our service providers may process information in countries other than your own. Applicable legal protections and transfer requirements depend on the circumstances; contact us for information about your request.

Retention and account deletion

Message and attachment retention depends on the product, plan and Workspace settings. Temporary Rooms and test conversations have their own expiry and cleanup schedules. Operational and backup copies may remain until their scheduled deletion or replacement. Retention is not unlimited simply because information was once stored.

You can request permanent account deletion inside the mobile app. To protect shared Workspaces, first transfer ownership or remove all other members from any Workspace you own. We then revoke account sessions and device registrations and process deletion of profile information, your messages, uploads and remaining owned Workspace content. Deletion normally completes within 15 minutes, and we send a completion confirmation to your account email. Storage, billing or delivery failures may take longer; contact us if you need help checking a request. We temporarily retain the confirmation delivery address encrypted, erase it after a successful send, and stop retrying after a 24-hour window and erase any remaining delivery address at the next cleanup. Deletion cannot be undone. Active subscriptions associated with the account are cancelled as part of the process; deletion does not itself promise a refund.

We may retain the minimum records needed for accounting, refunds, disputes, fraud prevention or legal obligations, including non-content billing identifiers and credit ledger entries. This does not justify retaining unrelated conversation content. Backups are not used to restore a deleted account into normal service; if a backup is restored for recovery, deletion requests must be reapplied. Information already exported or received by another person or external service is outside RosettaChat’s direct control.

Your choices and requests

You can update profile and language settings, control notification preferences, decline or withdraw AI permission, and request account deletion. Depending on the law applicable to you, you may also have rights to access, correct, obtain a copy of, restrict or object to processing of your personal information, withdraw consent, or complain to a competent data-protection authority. Contact the addresses above. We may need to verify your identity and distinguish your account from information controlled by a separate Workspace organization.

The mobile app uses the device’s permission controls when requesting access such as photo selection or notifications. Denying optional permissions may limit those features without preventing unrelated use.

Children and changes

RosettaChat is not designed or marketed as a children’s service. The App Store age rating is a separate content-rating declaration and does not by itself establish a legal consent age. If you believe a child has supplied information without the authority required by applicable law, contact us.

We will update this policy when our practices change and identify the revision date. Material changes to optional AI processing require renewed disclosure and permission where appropriate.