Privacy

Plain words. Updated 10 November 2026.

Who we are

Tafadal is made by PanX, a small product studio. Write to privacy@tafadal.app for anything on this page.

If you own a website that uses Tafadal

We store your email address, your password in hashed form, the text you give the assistant, and your settings. We store every conversation your visitors have with the assistant, and the name and email of visitors who leave their details. This is your data: you read it in Chats and Contacts, and you can ask us to delete all of it with your account.

We send you emails to confirm your address, reset your password, and tell you when a visitor leaves their details. You can turn the last kind off in Settings.

If you are a visitor chatting on someone's website

What you write goes to the website owner's Tafadal account so they can read it and reply. If you leave your name and email, the owner receives them. We keep a hashed form of your network address for one day to stop abuse, and we note your country and the language you wrote in. We do not set tracking cookies and we do not follow you across the web. The chat remembers the conversation in your browser tab only.

Where the data lives

The database runs on Supabase. The chat service runs on Cloudflare, which also runs the language model that writes the answers. Emails are sent through Mailtrap. Each of these processes data under its own agreement with us and does not use your data for anything else.

Deleting

Owners: write to privacy@tafadal.app from your account email and everything is deleted within seven days. Visitors: ask the website owner, or write to us with the website address and the email you left.