Legal
Privacy Policy
Last updated: June 28, 2026
1. Who We Are
Danalus ("we", "us", "our") is an AI-powered lead qualification platform. We embed a chat widget on our clients' websites that engages visitors in conversation, qualifies them as potential leads, and delivers lead data to our clients.
For privacy inquiries, contact us at hello@danalus.com.
2. Data We Process
We process the following categories of personal data from website visitors who interact with our chat widget:
- Identification data: Name, email address, phone number (when voluntarily provided during chat)
- Qualification data: Budget range, timeline, business needs, industry (collected through conversation)
- Conversation data: Full chat transcript between the visitor and the AI assistant
- Technical data: IP address, page URL, session ID, device type
3. Legal Basis (GDPR)
We process visitor personal data under the following legal bases:
- Consent (Art. 6(1)(a)): The visitor voluntarily initiates and participates in the chat conversation, providing their information knowingly.
- Legitimate interest (Art. 6(1)(f)): Our clients' legitimate interest in qualifying website visitors as potential business leads.
4. How We Use Your Data
- To qualify visitors as potential leads for our clients
- To generate AI-powered lead scoring and summaries
- To deliver lead data and conversation transcripts to our clients
- To send notifications to our clients when a qualified lead is captured
- To improve our AI qualification models and conversation quality
5. Data Sharing
We share visitor data with the client whose website the widget is installed on. This client becomes the data controller for the lead data. We may also process data through third-party subprocessors (e.g., cloud infrastructure, AI model providers) under data processing agreements.
6. Data Retention
Conversation data and lead records are retained for as long as the client maintains an active Danalus subscription. Upon cancellation, data is deleted within 30 days unless the client requests earlier deletion.
7. Your Rights (GDPR)
EU/EEA visitors have the right to:
- Access — request a copy of your personal data
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — request limitation of processing
- Objection — object to processing based on legitimate interest
- Data portability — receive your data in a structured format
- Lodge a complaint with your local data protection authority
To exercise these rights, contact hello@danalus.com or the client whose website you visited.
8. Security
We implement appropriate technical and organizational measures to protect personal data, including encryption in transit (TLS) and at rest, access controls, and row-level security to ensure client data isolation. Each client's data is strictly separated and inaccessible to other clients.
9. AI Processing
Conversations are processed by AI language models to generate qualification scores and summaries. The AI does not make autonomous decisions about visitors — it assists our clients' sales teams by organizing and scoring information provided voluntarily during chat.
11. International Transfers
Data may be transferred outside the EU/EEA (e.g., to cloud infrastructure and AI model providers). We ensure such transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) and provider certifications.
12. Changes to This Policy
We may update this policy from time to time. We will notify clients of material changes and update the "Last updated" date above.