Privacy Policy

Last updated: September 28, 2026

This Privacy Policy explains how Ignore All Previous Instructions LLC (“NetIntent”, “we”, “us”, or “our”) collects, uses, shares, and protects personal information in connection with the netintent.com website and the NetIntent live chat and AI agent service, including our chat widget, web dashboard, mobile apps, APIs, and integrations (together, the “Services”).

NetIntent lets businesses talk with the visitors of their websites and messaging channels. Each conversation can be answered by a person on the business’s team, by an AI agent that the business configures, or by both, with the AI handing the conversation over to a person when needed. Because of that, we handle personal information in two different roles, explained in Section 2.

Summary

• We collect information you give us (for example, your email when you join early access or create an account), information about how you use our website and Services, and the chat content that our customers and their visitors exchange through the Services.
• For chats on our customers’ websites, the business you are chatting with decides how your information is used. We process it on its behalf.
• Conversations may be answered by an AI agent. To generate replies, chat content is sent to AI model providers that act as our subprocessors. We do not use chat content or our customers’ data to train AI models, and we do not allow our AI providers to do so.
• On netintent.com we use Google Analytics, Google Ads conversion tracking, and the Meta (Facebook) Pixel to measure our website and our advertising. You can control these technologies as described in Section 8.
• We do not sell personal information for money. Our use of advertising pixels may count as “sharing” or “targeted advertising” under some US state laws, and you can opt out (Section 12).
• You can contact us at [email protected] to exercise your privacy rights.

1. Who we are

The Services are operated by Ignore All Previous Instructions LLC, a Delaware limited liability company that operates NetIntent, 2810 N Church St STE 89754, Wilmington, DE 19802, United States. You can reach us about privacy matters at [email protected].

2. Our two roles: controller and processor

2.1 When we are the controller

We decide how and why personal information is processed, and we are the “controller” (or “business” under US state laws), for:

• visitors of netintent.com and people who join our early-access list or contact us;
• our customers’ account information: the people who sign up for NetIntent, their team members, and billing contacts;
• information about how the Services are used (for example, usage statistics, logs, and security events), which we use to run, secure, and improve the Services.

2.2 When we are the processor

When a business (our “Customer”) installs NetIntent on its website or connects its messaging channels, the chats between that business and its visitors, together with the visitor information described in Section 3.4, are processed by us on behalf of that Customer. The Customer is the controller of that information, and we act as its “processor” (or “service provider”). We use that information only to provide the Services to the Customer, following the Customer’s instructions and our agreement with it.

If you chatted with a business that uses NetIntent, please read that business’s privacy policy and contact the business directly to exercise your rights. If you contact us instead, we will forward your request to the relevant Customer where we can identify it.

3. Information we collect

3.1 Information you give us

• Early access and contact. Your email address when you join the early-access list, and anything you write to us by email or through our own chat.
• Account information. Your name, email address, password (stored in hashed form), company name, website address, role, and profile details such as the name, title, and photo that visitors may see in chats.
• Team members. Names and email addresses of colleagues you invite to your account.
• Billing information. Billing contact, company details, tax identifiers, and plan history. Payment card details are collected and stored by our payment processor; we receive only limited information such as the card brand, last four digits, and expiration date.
• Content for the AI agent. Documents, web pages, help articles, product catalogs, policies, instructions, and saved replies that you add so that the AI agent and your team can answer questions (“Knowledge Content”).
• Support and feedback. Information you share when you ask for help, answer a survey, or send us feedback.

3.2 Information collected automatically on netintent.com

• Device and log data. IP address, browser type and version, operating system, device type, language, referring URL, pages viewed, and the date and time of each request.
• Approximate location derived from your IP address (country, region, city). We do not collect precise geolocation.
• Analytics and advertising data collected through cookies, pixels, and similar technologies, including how you arrived at our site (for example, from an ad), which pages you visited, and whether you completed actions such as joining early access. See Section 8.

3.3 Information about use of the Services

When you use the dashboard, mobile apps, or API, we collect information such as log-ins, features used, settings, the number and type of conversations, AI usage (for example, how many conversations the AI agent resolved or handed over), error reports, device identifiers, and push-notification tokens for the mobile apps.

3.4 Chat data we process for our Customers

When visitors chat with a Customer through NetIntent, we process on the Customer’s behalf:

• Messages and files exchanged in the conversation, including messages written by the Customer’s team and by the AI agent, private notes the team adds, and chat ratings.
• Text typed before it is sent. The widget may show the Customer’s team what a visitor is typing before the visitor presses Send (“typing insights”), so the team can prepare an answer.
• Visitor details the visitor provides, such as name, email address, phone number, or order number.
• Visitor technical and browsing data, such as IP address, approximate location, browser, device, language, the pages visited on the Customer’s website, referrer and campaign parameters, and the time spent on the site.
• Data from the Customer’s systems, where the Customer enables it: for example, shopping-cart contents, order and subscription status from Shopify, WooCommerce, or Stripe, or account details the Customer passes to the widget about its signed-in users.
• Messaging-channel data, where the Customer connects WhatsApp, Instagram, or Facebook Messenger: the profile name, identifier, and messages provided by that platform.
• An identifier stored in the visitor’s browser that lets the conversation continue across pages and visits (see Section 8.3).

We ask Customers not to use the Services to collect sensitive information, such as full payment card numbers, government identification numbers, health information, or passwords, and we ask visitors not to share such information in chats.

3.5 Information from third parties

• Integrations that a Customer connects (for example, Shopify, WooCommerce, Stripe, Slack, Zapier, WordPress, and Meta messaging platforms), which send us the data the Customer authorizes.
• Advertising and analytics partners (Google and Meta), which may give us aggregated reports about the performance of our ads and website.
• Sign-in providers, if we offer and you use a third-party sign-in, which share your name and email address.

4. How we use information

We use the information we control to:

• provide, operate, and maintain the Services, including the chat widget, dashboard, mobile apps, email notifications, and integrations;
• create and manage accounts, authenticate users, and process payments;
• manage the early-access list and tell you when access opens;
• provide customer support and respond to your requests;
• send service messages, such as security alerts, billing notices, and changes to our terms;
• send product news and marketing emails, where permitted by law; you can unsubscribe at any time;
• measure and analyze how our website and Services are used, and improve them;
• measure the effectiveness of our advertising and show our ads to relevant audiences, as described in Section 8;
• detect, prevent, and investigate fraud, spam, abuse, security incidents, and violations of our Terms of Service;
• comply with legal obligations and enforce our agreements.

We use chat data that we process for Customers (Section 3.4) only to provide the Services to that Customer: to deliver messages, show conversation history, generate AI replies and drafts, carry out actions the Customer has enabled, send email transcripts and follow-ups, produce the Customer’s reports, keep the Services secure, and troubleshoot problems. We may create aggregated statistics that do not identify any Customer or individual (for example, the average number of conversations per day across the Services) and use them to operate and improve the Services.

5. How the AI agent uses information

Customers choose whether conversations are answered by their team, by the AI agent, or by both. When the AI agent is turned on:

• How replies are generated. To answer a visitor, we send the relevant parts of the conversation, the Customer’s Knowledge Content and instructions, and the visitor and store data the Customer has enabled to a large language model hosted by one of our AI providers. The model returns a draft reply or a suggested action, which the Services then deliver or show to the Customer’s team.
• No training. We do not use Customer data, chat content, or Knowledge Content to train or fine-tune AI models, and our agreements with AI providers do not permit them to use this data to train their models. Knowledge Content is used only to answer questions for the Customer who provided it.
• Limited retention by AI providers. Our AI providers process the data only to return a response to us. Where a provider keeps inputs and outputs temporarily to detect abuse, we require that retention to be limited (typically no longer than 30 days) and to be used for no other purpose.
• Actions. If a Customer enables actions (for example, checking an order, changing a shipping address, or issuing a refund in Shopify or Stripe), the AI agent uses the Customer’s connected accounts to perform them within the limits and approval rules that the Customer sets. Every AI reply and action is recorded in the conversation so the Customer’s team can review it.
• Handoff to a person. Visitors can ask for a person at any time, and the AI agent hands the conversation over to the Customer’s team with a summary when it cannot help or when the Customer’s rules require it.
• AI disclosure. The Services are designed so that visitors can tell when they are talking with an AI agent. Customers are responsible for keeping that disclosure in place and for any notices their local laws require.
• No decisions with legal effect. The AI agent answers questions and performs the tasks a Customer configures. It is not used by us to make decisions about individuals that produce legal or similarly significant effects.
• Accuracy. AI replies can be incomplete or wrong. Customers can review conversations, correct the AI agent’s Knowledge Content, and take over at any time.

6. Legal bases for processing (EEA, UK, and Switzerland)

Where the GDPR, UK GDPR, or Swiss data protection law applies, we rely on the following legal bases for the processing we control:

• Performance of a contract: to create your account, provide the Services, process payments, and provide support.
• Legitimate interests: to secure and improve the Services, prevent fraud and abuse, understand usage in aggregate, communicate with business contacts, and defend legal claims. We balance these interests against your rights, and you can object (Section 11).
• Consent: for non-essential cookies and similar technologies, including Google Analytics, Google Ads conversion tracking, and the Meta Pixel, and for marketing emails where consent is required. You can withdraw consent at any time without affecting processing that happened before.
• Legal obligation: to keep tax and accounting records and to respond to lawful requests.

For chat data we process as a processor, the Customer is responsible for having a legal basis.

7. How we share information

We share personal information only as described below:

• With the Customer. Chat data belongs to the Customer the visitor chatted with, and is available to that Customer and its team members.
• With service providers (subprocessors) that help us run the Services under contracts that limit their use of the data, including providers of cloud hosting and storage, AI models, email delivery, push notifications, payment processing, customer support tools, error monitoring, and security. A current list of our subprocessors is available on request at [email protected].
• With integrations a Customer connects. When a Customer connects a third-party service, we exchange data with it as the Customer instructs. That service’s own terms and privacy policy apply.
• With advertising and analytics partners. Google and Meta receive information from our website through the technologies described in Section 8. We do not send chat content or Customer data to advertising partners.
• For legal reasons. If we believe in good faith that disclosure is required by law, a court order, or a valid government request, or is needed to protect the rights, property, or safety of NetIntent, our users, or others. Where permitted, we will notify the affected Customer.
• In a business transaction. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy.
• With your consent or at your direction.

8. Cookies, pixels, and similar technologies

8.1 On netintent.com

We and our partners use cookies, pixels, and similar technologies on our website:

These partners may collect information such as your IP address, browser and device identifiers, the pages you visit, and the actions you take, and may combine it with information they already have about you under their own privacy policies. Google’s use is described at How Google uses information from sites that use its services, and Meta’s at the Meta Privacy Policy. For the measurement of signups, we may send a hashed (irreversibly encoded) email address to Google or Meta so they can match a conversion to an ad click.

8.2 Your choices

• Consent. Where the law requires your consent (for example, in the EEA, the UK, and Switzerland), analytics and advertising technologies are used only after you agree through our cookie banner, and you can change your choice at any time via the cookie settings link on our website.
• Browser controls. You can block or delete cookies in your browser settings. Blocking essential cookies may affect how the site works.
• Google. You can manage ad personalization at Google Ad Settings and opt out of Google Analytics with the Google Analytics opt-out add-on.
• Meta. You can manage ads based on activity from partners in your Meta ad preferences.
• Industry opt-outs. You can also use the Digital Advertising Alliance or Your Online Choices (EU) tools.
• Global Privacy Control. We treat a Global Privacy Control signal from your browser as a request to opt out of the sale or sharing of personal information and targeted advertising for that browser.

8.3 In the chat widget on Customers’ websites

The NetIntent widget uses browser storage (cookies or local storage) to keep a visitor’s conversation, unsent drafts, and widget settings across pages and visits, and to recognize the returning visitor. These technologies are needed for the chat to work. The widget does not contain advertising pixels. Customers are responsible for informing their visitors and, where required, obtaining their consent.

9. International data transfers

NetIntent is based in the United States, and we and our service providers may process information in the United States and other countries. These countries may have data protection laws that differ from those where you live. When we transfer personal information from the EEA, the UK, or Switzerland, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, or on another lawful transfer mechanism. You can request a copy of the relevant safeguards at [email protected].

10. How long we keep information

• Early-access list: until access opens and for a reasonable period after, or until you ask us to remove you.
• Account information: for as long as the account is active. After an account is closed, we delete or anonymize it within 90 days, except where we need to keep some of it longer as described below.
• Chat data and Knowledge Content: for as long as the Customer keeps it, subject to the conversation-history limits of the Customer’s plan. Customers can delete conversations. When a Customer’s account is closed, we delete its chat data and Knowledge Content within 30 days, and remove it from backups within a further 30 days.
• Billing and tax records: for as long as required by tax and accounting laws, typically up to 7 years.
• Server and security logs: up to 12 months, unless needed longer to investigate an incident.
• Google Analytics data: up to 14 months, after which it is automatically deleted from our analytics property.
• Data needed for legal claims: until the matter is resolved.

11. Your rights

Depending on where you live, you may have the right to:

• know what personal information we hold about you and get a copy of it;
• correct inaccurate information;
• delete your information;
• receive your information in a portable format;
• restrict or object to certain processing, including processing based on legitimate interests and direct marketing;
• withdraw consent at any time, where we rely on consent;
• opt out of the sale or sharing of personal information and of targeted advertising (Section 12);
• not be discriminated against for exercising your rights;
• lodge a complaint with your local data protection authority.

To exercise your rights, email us at [email protected]. Account holders can also update or delete much of their information in the dashboard. We will verify your request using information associated with you, respond within the time required by law (usually 30 days in the EEA and UK, and 45 days under US state laws), and explain if we cannot fulfil it. You may use an authorized agent where the law allows; we may ask for proof of the agent’s authority. If we deny your request, you can appeal by replying to our response, and we will review the decision.

If your request concerns a chat with a business that uses NetIntent, we will refer you to that business, which controls that information (Section 2.2).

12. Additional information for US residents

This section applies to residents of California and other US states with comprehensive privacy laws. In the last 12 months, we have collected the following categories of personal information: identifiers (such as name, email address, IP address, and cookie identifiers); commercial information (such as plan and billing history); internet or other electronic network activity (such as browsing and usage data); approximate geolocation; professional information (such as company and role); and inferences drawn from the above about your interest in our Services. We collect them from the sources described in Section 3 and use them for the purposes described in Section 4.

Sale and sharing. We do not sell personal information for money. Our use of Google Ads and Meta Pixel on netintent.com may be considered a “sale” or “sharing” of identifiers and internet activity for cross-context behavioral advertising, or “targeted advertising”. You can opt out by enabling Global Privacy Control in your browser, by changing your choices in our cookie settings, or by emailing us at [email protected] with the subject “Do Not Sell or Share”. We do not knowingly sell or share the personal information of consumers under 16.

Sensitive information. We do not intentionally collect sensitive personal information about you as defined by these laws, other than account log-in credentials, and we do not use or disclose it for purposes that would give you the right to limit its use.

Disclosures for business purposes. We disclose the categories of personal information above to service providers, integrations you connect, and professional advisors, for the purposes described in Section 7.

13. Security

We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit (TLS), access controls based on the least-privilege principle, hashed passwords, logging, and regular backups. No method of transmission or storage is completely secure. If we become aware of a security incident affecting personal information, we will notify affected Customers and individuals as required by law. Customers are responsible for keeping their team’s credentials safe and for managing who has access to their account.

14. Children

The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we will delete it. Customers must not use the Services to knowingly collect personal information from children without the consent required by law.

15. Third-party websites and services

Our website and Services may link to or integrate with third-party websites and services, such as Shopify, Stripe, WhatsApp, and Instagram. Their privacy practices are governed by their own policies, and we are not responsible for them.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the “Last updated” date. If a change is material, we will give notice in advance, for example by email or in the dashboard. Where the law requires your consent to a change, we will ask for it.

17. Contact us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Ignore All Previous Instructions LLC (NetIntent)
2810 N Church St STE 89754
Wilmington, DE 19802, United States
Email: [email protected]