Privacy statement

Effective 31 August 2026. FAQ Plus is operated by Solid Software B.V., Rümkelaan 32, Utrecht, Netherlands (KvK 94194432). Contact for anything on this page: support@faqplus.app.

If you chat with a business's assistant

• Your messages are sent to Anthropic (US) to generate answers. Anthropic does not use them to train models and deletes them within 30 days; messages flagged for abuse can be kept up to two years under its API terms.
• The chat is not stored on our servers, unless the business has turned on conversation storage; the chat page's privacy line says so when it is on. Stored conversations are readable by that business and deleted after 30 days.
• If you ask to have a question passed to the business, the question, the conversation so far, and the email address you choose to leave are emailed to the business, and the question is stored for the business until it deletes it.
• Businesses can turn on logging of questions the documents could not answer; the chat page's privacy line says so when this is on.
• No cookies, no account, no tracking. To limit abuse we store a hashed, non-reversible form of your IP address, deleted within a month.
• Legal basis: the legitimate interest of the business in answering its visitors and of us in protecting the service; escalation email is sent at your request.
• The business you are chatting with is the controller of this data; we process it on the business's behalf. Rights requests can go to the business or to support@faqplus.app.

If you run a business on FAQ Plus

For your account data, Solid Software B.V. is the controller.

• We store your account (business name, email, password hash), the text of your documents, escalated questions, opted-in unanswered questions, and per-conversation token and cost counters. Chat transcripts are stored only while your conversation-storage setting is on, and are deleted after 30 days.
• Legal basis: performance of the contract with you; for security measures, our legitimate interest.
• Billing runs through Stripe; we store your Stripe customer and subscription ids, never card details. Stripe processes your payment data as an independent controller.
• Data is kept while your account exists. Deleting a document, an escalation, or your whole account removes it immediately; account deletion removes everything. Accounts whose trial expired over 12 months ago without a subscription are deleted, data included.
• Backups for disaster recovery are retained up to 30 days and then expire.

Subprocessors and transfers

• Cloudflare (hosting, database, bot protection): data stored in the EU region; certified under the EU-US Data Privacy Framework.
• Anthropic (AI answer generation, US): processing under a data processing agreement with EU Standard Contractual Clauses.
• Resend (email delivery): EU region; data processing agreement with EU Standard Contractual Clauses.
• Stripe (payments, business accounts only): certified under the EU-US Data Privacy Framework.

Your rights

• You can request access, correction, deletion, restriction, portability, or object to processing: support@faqplus.app. We respond within one month.
• You can complain to the Dutch data protection authority, Autoriteit Persoonsgegevens.

Analytics on this site are cookieless and aggregate (Cloudflare Web Analytics). We announce changes to this statement to account holders by email.

Changed 31 August 2026: Anthropic's retention periods are now stated precisely; the previous version described them as brief.