Privacy Policy

Last updated: March 25, 2026

Who we are

Demitr is operated by dcode technologies S.à r.l., a company registered in Luxembourg (RCS B281.932), with its registered office at 14 rue du Commerce, L-3455 Dudelange, Luxembourg.

Contact: [email protected]

What Demitr does

Demitr is an AI chat widget that website owners embed on their sites. When a visitor uses the chat, their messages are processed by an AI model to generate answers about the website owner's business.

Data we process

When a visitor uses the chat widget, the following data is processed:

Data we do NOT process

Lawful basis (GDPR Art. 6)

Processing is based on explicit consent. The widget displays a consent gate before any message can be sent. Visitors who decline are not processed.

Data retention

Chat sessions are held in server memory only and auto-expire after 30 minutes of inactivity. No messages are written to disk, database, or any persistent storage. When the session expires, all data is permanently deleted.

PII anonymization

Before any message reaches the AI model, a regex-based tokenizer replaces email addresses and phone numbers with tokens (e.g., [EMAIL_1], [PHONE_1]). The token-to-value mapping exists only in memory for the session duration and is never persisted.

Sub-processors

All sub-processors are located in the European Union. No data is transferred outside the EU.

Your rights (GDPR Art. 15-22)

You have the right to access, rectify, erase, restrict processing, and port your data. However, because we do not store any personal data beyond the 30-minute session, there is typically no data to access or erase.

To exercise your rights: [email protected]

Self-hosted instances

Website owners who self-host the Demitr API on their own servers are responsible for their own data processing. This privacy policy covers only the hosted service at demitr.ai.

Pro+ lead capture disclosure

If you interact with a chat widget on a Pro or Team plan, the website owner may have enabled lead capture. In that case, email addresses and phone numbers you voluntarily share in the chat may be stored by the website owner (the data controller). This data is stored on our servers in the EU and is accessible only to the website owner. Contact the website owner to exercise your data rights regarding captured leads.

Anonymous analytics

We collect anonymous, aggregated conversation statistics (message counts, language used, session duration) for Starter+ customers. These statistics contain no personally identifiable information and no message content.

Changes

We may update this policy. Changes will be posted on this page with an updated date.