GDPR Compliance

Last updated: March 1, 2026

INTRA AI is committed to protecting the privacy of all users and complying with the General Data Protection Regulation (GDPR) for users in the European Economic Area, and with India's Digital Personal Data Protection Act 2023 for Indian users.

Your rights under GDPR

Right to Access

You can request a complete copy of all data we hold about you, including account details, bot configurations, and conversation logs.

Right to Rectification

If any data we hold about you is inaccurate or incomplete, you can request that we correct it.

Right to Erasure

You can request deletion of your account and all associated data at any time. We will process this within 30 days.

Right to Portability

You can request your data in a structured, machine-readable format (JSON) to transfer to another service.

Right to Object

You can object to the processing of your personal data. We will stop processing unless we have a compelling legitimate reason.

Right to Restrict

You can request that we restrict processing of your data while a complaint is being investigated.

Lawful Basis for Processing

We process your personal data on the following lawful bases: Contract (processing necessary to provide the service you signed up for), Legitimate interests (security logs, fraud prevention, service improvement), and Consent (marketing emails, which you can withdraw at any time).

Data Controller

INTRA AI acts as the data controller for user account data. For conversation data collected by your chatbots on your website, you are the data controller and INTRA AI acts as a data processor on your behalf.

Data Transfers

Your data is stored on servers in India. If you are accessing from within the EEA, your data may be transferred to India. We ensure appropriate safeguards are in place for such transfers.

Data Retention

Account data is retained until you delete your account. Conversation data is retained for 12 months. Server logs are retained for 90 days. Payment records are retained for 7 years as required by Indian tax law.

Data Breaches

In the event of a data breach affecting your personal data, we will notify you by email within 72 hours of becoming aware of the breach, as required by GDPR Article 33.

How to Exercise Your Rights

Email your request to privacy@intra-ai.com with the subject line "GDPR Request". We will respond within 30 days. We may ask you to verify your identity before processing your request.

Submit a GDPR request

To access, correct, export, or delete your data, contact our privacy team.

Email privacy@intra-ai.com