commen><Back to home

Privacy Policy

Last updated: June 9, 2025

Who we are

Commen is an AI-powered chat widget for websites. This service is operated by Commen (an unincorporated entity, EU-based). When we say “Commen”, “we”, “us” or “our” in this policy, we mean the operator of commen.app.

For privacy-related questions, contact us at privacy@commen.app.

What data we collect

Waitlist sign-ups. When you submit your email on our website, we collect your email address. We use it solely to contact you when a spot in the closed beta opens. We do not share it with third parties for marketing purposes.

Widget conversations. When a visitor interacts with a Commen widget embedded on a customer's website, the conversation content is processed to generate an AI response. Conversation data is stored for 90 days and then permanently deleted. It is never used to train AI models.

Usage data. We collect basic technical data (IP address, browser type, pages visited) to operate and improve our service. This data is not sold or shared with advertisers.

Legal basis (GDPR)

We process your data under the following legal bases:

  • Legitimate interest — to operate and improve the service.
  • Consent — for waitlist sign-ups; you can withdraw at any time by emailing us.
  • Contract — to fulfil our obligations to customers using the widget.

Third-party processors

We use the following sub-processors. All are bound by data processing agreements:

ProcessorPurposeLocation
SupabaseDatabase & authenticationEU (AWS Frankfurt)
AnthropicAI response generationUSA
VercelHosting & edge deliveryEU / USA
ResendTransactional emailUSA

For transfers to processors outside the EU (Anthropic, Vercel, Resend), we rely on Standard Contractual Clauses (“SCCs”) as the transfer mechanism.

Data retention

  • Waitlist emails — retained until you request deletion or the service publicly launches.
  • Conversation data — deleted after 90 days.
  • Usage logs — retained for up to 30 days.

Your rights

Under GDPR, you have the right to access, correct, delete, or export your personal data. You may also object to or restrict processing. To exercise any of these rights, email privacy@commen.app. We will respond within 30 days.

You also have the right to lodge a complaint with your local supervisory authority.

Cookies

We use only functional cookies necessary to operate the service (session management). We do not use tracking or advertising cookies.

Changes to this policy

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact

Questions or requests regarding this policy: privacy@commen.app