Privacy Policy

How Accelerate collects, uses, and protects data.

This policy explains what data we collect, why we collect it, which providers help us run the service, and what rights users may have.

Effective date: March 12, 2026

What we collect

We collect account information such as name, email address, login details, billing records, and workspace information.

We collect agent configuration data, including prompts, variables, knowledge settings, uploaded files, website-imported content, and deployment settings.

We collect chat conversation data and lead capture data, including visitor name, email, phone number, enquiry intent, and conversation transcripts when the platform is configured to capture them.

We collect visitor metadata such as IP address, timezone, browser and device signals, page URL, referrer, and session identifiers for security, analytics, and routing.

We collect billing and payment information through our third-party payment processor. We do not store full credit card numbers. All payment card data is processed by Paddle under PCI DSS Level 1 compliance.

Our role and customer role

For account, billing, security, analytics, and product operations, Accelerate may act as an independent controller of personal data.

For visitor conversations, lead capture data, uploaded knowledge, website-imported content, and customer-configured AI agents, the customer is normally the controller or business and Accelerate is normally the processor or service provider acting on the customer's instructions.

Customers are responsible for making sure their own website privacy notices, cookie notices, AI disclosures, and consent flows accurately describe how they use Accelerate.

How we use data

We use data to provide and secure the service, authenticate users, power AI replies, store knowledge bases, route leads, improve reliability, prevent abuse, and support customers.

We may use aggregated or de-identified usage data to improve product performance, reliability, and reporting. We do not sell your personal data.

Legal bases

Where GDPR or similar law applies, we rely on legal bases such as contract performance, legitimate interests, consent where required, legal obligations, and customer instructions for processor activities.

Our legitimate interests include securing the service, preventing abuse, improving reliability, supporting customers, maintaining billing records, and understanding aggregate product usage.

AI processing and training disclosure

Your conversation data, prompts, and knowledge files are sent to third-party AI providers to generate responses for your agents. This processing is necessary to deliver the core service.

We do not use your data to train our own AI models. We do not control how third-party AI providers handle data sent through their APIs. We recommend reviewing your AI provider’s data usage policy if this is a concern.

If you provide your own API key (at workspace or agent level), API calls are made directly to the provider under your own account and their terms apply.

Third-party services and sub-processors

We use third-party providers to host the application, store data, authenticate users, process payments, send emails, provide AI responses, deliver analytics, support caching, and operate optional messaging integrations.

Our public Subprocessors page lists the main provider categories and the categories of data they process. A detailed vendor list is available to customers on request.

Payment and subscription data is shared with Paddle for billing, tax, invoice, and payment processing. See Paddle's privacy policy for details on Paddle's handling of payment data.

Data may be processed in the United States, the United Kingdom, and other jurisdictions where our service providers operate.

Data processing agreement

If you require a Data Processing Agreement (DPA) for GDPR compliance or other regulatory requirements, contact support@acceleratenow.app and we will work with you to put one in place.

Knowledge indexing and website content

If you connect a website or upload documents, we may crawl, store, process, chunk, and index that content so your agents can answer questions more accurately.

You are responsible for making sure you have the right to upload or connect the content you use with Accelerate. Do not upload content that contains personal data of third parties unless you have lawful grounds to do so.

Retention

We keep data for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements.

Conversation data and lead data are retained for the lifetime of your account unless you delete them.

Transaction records, invoices, and payment history are retained for 7 years for tax and legal compliance, separate from other account data. These records are not deleted when your account is removed.

You may request deletion of your account and workspace data, subject to legal, billing, fraud-prevention, and operational retention requirements. Account deletion requests will be processed within thirty (30) days.

Data security

We use industry-standard security measures to protect your data, including encrypted transport, access controls, managed infrastructure protections, and secure credential storage.

No system is completely secure. We cannot guarantee absolute security of your data but will promptly notify affected users and relevant authorities in the event of a data breach as required by applicable law.

More detail is available on our Security page.

Cookies and similar technologies

We use cookies, local storage, and similar technologies for authentication, session continuity, analytics, preferences, and security.

The embeddable chat widget uses session storage and cookies strictly for session management and does not track visitors across sites.

Your rights

Depending on your location, you may have rights to access, correct, export, delete, or restrict processing of your personal data.

If GDPR applies to you, you have the right to: access your data, rectify inaccurate data, request erasure, restrict processing, data portability, object to processing, and lodge a complaint with a supervisory authority. Billing and transaction records are retained for 7 years for tax compliance and are exempt from erasure requests.

If California privacy law (CCPA/CPRA) applies to you, you have the right to know what personal information we collect, request deletion, and opt out of any sale of personal information. We do not sell personal information.

To exercise any of these rights, contact support@acceleratenow.app. We will respond within thirty (30) days or as required by applicable law.

Children’s privacy

Accelerate is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

International processing

Your data may be processed in countries outside your own, including the United States, where our primary infrastructure providers operate. We take reasonable steps to use providers and safeguards appropriate for the services we offer, including standard contractual clauses where applicable.

Changes to this policy

We may update this policy from time to time. When we do, we will post the updated version on this page and update the effective date. Material changes will be communicated through the platform or by email where practical.

Contact

For privacy questions or requests, contact support@acceleratenow.app. Accelerate is operated by Accelerate Now.