1. What we collect today
IntoChat opens to the public in Q3 2026. Until then, this website collects personal data in exactly one place: the forms (early access and contact). When you submit one, we store:
- your first and last name, email address, and phone number;
- your company name, if you give one;
- what you tell us about your desired use case;
- technical context of the submission: the page it came from, your IP address, and browser user agent (used for spam protection and abuse prevention).
Form data is stored encrypted in our database. We use it to answer you, to give you early access when it opens, and to understand what people want to use IntoChat for. Legal basis: your consent, given by submitting the form (Art. 6(1)(a) GDPR), and our legitimate interest in preventing abuse of the forms (Art. 6(1)(f) GDPR).
2. What we will collect when the product launches
When accounts open, the Service will additionally process:
- Account data: name, email, password (stored hashed), billing details. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
- Chat content and memory: what you type, files you attach, and the results the Service produces for you. Legal basis: performance of the contract.
- Connected-system data: data the Service reads from or writes to the tools you connect (for example Salesforce), strictly to fulfil your requests. You control which tools are connected and can disconnect any tool at any time. Legal basis: performance of the contract.
- Usage and billing logs: which requests ran and what they cost. Legal basis: performance of the contract and our legal obligations (tax law).
We will update this policy before launch to reflect the shipped product, and notify account holders of material changes.
3. Who we share data with
We do not sell personal data. We share it only with processors we need to run the Service:
- AI model providers (at launch): OpenAI, Anthropic, xAI, and Google receive the content needed to fulfil your request. We use these providers under business terms whose policy is that customer content is not used to train their models.
- Infrastructure: hosting and email providers that run this site and our correspondence.
- Authorities: only where the law requires it.
The current processor list is available on request at [email protected]. Where a processor is outside the EEA, transfers rely on adequacy decisions or EU Standard Contractual Clauses.
4. How long we keep data
5. Your rights
Under the GDPR you can ask us, at any time, to:
- show you the personal data we hold about you (access);
- correct it (rectification) or delete it (erasure);
- hand it over in a portable format (portability);
- stop processing based on consent or legitimate interest (withdrawal, objection).
Write to [email protected]; we answer within one month. You can also complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
6. Cookies
Covered separately in the Cookie Policy. Short version: strictly necessary cookies only, no advertising cookies, and no analytics cookies are currently set.
7. Security
Form data is encrypted at rest. Access to personal data is limited to the people who need it to answer you. At launch, connections to your systems use the authorization each system provides (for example OAuth for Salesforce), and the Service acts only within the permissions you grant.
8. Changes to this policy
When this policy changes, we update the date at the top. For material changes affecting account holders, we notify you by email or in the product.
9. Contact
Muncly Customer Relationship Consultants · Pondweg 2, 2153 PK Nieuw-Vennep, the Netherlands · KVK 94424764 · [email protected]