Privacy statement

Effective 24 August 2026. FAQ Plus is operated by Solid Software B.V., Rümkelaan 32, Utrecht, Netherlands (KvK 94194432). Contact for anything on this page: support@faqplus.app.

If you chat with a business's assistant

• Your messages are sent to Anthropic (US) to generate answers. Anthropic does not use them to train models and retains them only briefly for abuse detection under its API terms.
• The chat is not stored on our servers. It lives in your browser and is gone when you close the page.
• If you ask to have a question passed to the business, the question, the conversation so far, and the email address you choose to leave are emailed to the business, and the question is stored for the business until it deletes it.
• Businesses can turn on logging of questions the documents could not answer; the chat page's privacy line says so when this is on.
• No cookies, no account, no tracking. To limit abuse we store a hashed, non-reversible form of your IP address, deleted within a month.
• Legal basis: the legitimate interest of the business in answering its visitors and of us in protecting the service; escalation email is sent at your request.
• The business you are chatting with is the controller of this data; we process it on the business's behalf. Rights requests can go to the business or to support@faqplus.app.

If you run a business on FAQ Plus

For your account data, Solid Software B.V. is the controller.

• We store your account (business name, email, password hash), the text of your documents, escalated questions, opted-in unanswered questions, and per-conversation token and cost counters. We store no chat transcripts.
• Legal basis: performance of the contract with you; for security measures, our legitimate interest.
• Billing runs through Stripe; we store your Stripe customer and subscription ids, never card details. Stripe processes your payment data as an independent controller.
• Data is kept while your account exists. Deleting a document, an escalation, or your whole account removes it immediately; account deletion removes everything. Accounts whose trial expired over 12 months ago without a subscription are deleted, data included.
• Backups for disaster recovery are retained up to 30 days and then expire.

Subprocessors and transfers

• Cloudflare (hosting, database, bot protection): data stored in the EU region; certified under the EU-US Data Privacy Framework.
• Anthropic (AI answer generation, US): processing under a data processing agreement with EU Standard Contractual Clauses.
• Resend (email delivery): EU region; data processing agreement with EU Standard Contractual Clauses.
• Stripe (payments, business accounts only): certified under the EU-US Data Privacy Framework.

Your rights

• You can request access, correction, deletion, restriction, portability, or object to processing: support@faqplus.app. We respond within one month.
• You can complain to the Dutch data protection authority, Autoriteit Persoonsgegevens.

Analytics on this site are cookieless and aggregate (Cloudflare Web Analytics). We announce changes to this statement to account holders by email.