Privacy Policy
This Privacy Policy explains how Chabir LLC, operating under the Dalilou brand, handles personal information in connection with our website, SaaS platform, WordPress, WooCommerce and Shopify integrations, AI Sales Agent services and Partner Program.
Dalilou provides AI-powered tools that help business customers engage website visitors, qualify opportunities, capture leads and facilitate bookings. Dalilou also operates a Partner Program that allows approved partners to refer new customers.
Who we are
Dalilou is operated by:
For certain processing activities, Chabir LLC acts as the controller of personal information. When Dalilou processes visitor information through an AI Sales Agent on behalf of a business customer, Dalilou generally acts as a processor or service provider and the customer determines the purposes and means of the processing.
Information we collect
Depending on how you use Dalilou, we may process information such as:
Account information
Name, email address, login information and account identifiers.
Business information
Company name, website details, business configuration and Sales Agent settings.
Subscription & billing information
Subscription status, plan, transaction references and billing-related identifiers. Payment card information may be processed directly by our payment service providers rather than stored by Dalilou.
Website & integration information
Connected domains, WordPress, WooCommerce and Shopify configuration, installation identifiers and integration settings.
Shopify commerce data
When a merchant installs the Dalilou Shopify app, Dalilou may process store identifiers, product and variant information, inventory or availability data, order and line-item information needed for attribution, and Shopify Files or media selected by the merchant for supported app features.
Google Workspace & booking integration data
When a customer connects a Google Workspace service such as Google Calendar, Dalilou may process information made available through the permissions the customer authorizes, such as account or calendar identifiers, availability information, event metadata and booking details necessary to provide the requested integration.
Visitor & lead information
Conversation messages, name, email address, telephone number, qualification answers, lead scores and booking-related information submitted through a customer’s Sales Agent.
Technical information
IP address, browser or device information, timestamps, security logs, request logs and diagnostic data.
Communications
Messages sent to our support or commercial teams.
Affiliate partner information
Name, email address, business or company information, website or promotional channels, affiliate account identifiers, payout details and, where required, tax or verification information provided in connection with the Dalilou Partner Program.
Affiliate & referral information
Referral identifiers, affiliate codes, attribution information and related click, signup, subscription or purchase data used to operate, measure and administer the Dalilou Partner Program.
Where information comes from
We may receive information directly from customers when they create or configure an account, directly from partners when they apply to or participate in the Dalilou Partner Program, automatically when the Dalilou services are used, from website visitors who interact with a customer’s Sales Agent, from referral or affiliate links used to reach Dalilou, from Google APIs when a customer expressly authorizes a Google Workspace integration, and from service providers involved in operating the platform.
When visitor information is collected through a customer’s website, that customer is responsible for providing appropriate privacy notices and establishing a valid legal basis for its collection and use of the information.
How we use personal information
- Provide, operate and secure Dalilou.
- Authenticate and manage customer accounts.
- Configure and operate AI Sales Agents.
- Process website conversations and create leads.
- Facilitate bookings and manage service functionality.
- Provide user-requested Google Workspace integration features, such as checking calendar availability and creating or managing bookings when authorized by the user.
- Manage subscriptions, licensing and customer support.
- Operate the Dalilou Partner Program, manage partner accounts, attribute referrals, calculate qualifying commissions and administer partner payouts.
- Prevent abuse and investigate security or technical incidents.
- Troubleshoot issues and improve service reliability.
- Comply with applicable legal and regulatory obligations.
We may also use aggregated or de-identified information to understand service performance and improve Dalilou where that information no longer identifies an individual.
Legal bases for processing
Where the GDPR or similar legislation applies, our legal basis depends on the processing activity.
- Contract: where processing is necessary to provide Dalilou to a customer or to administer a partner’s participation in the Dalilou Partner Program.
- Legitimate interests: for operating, securing and improving the service, administering referrals, preventing fraud and protecting the integrity of the Partner Program where appropriate.
- Legal obligations: where processing is required to comply with applicable law, including accounting, tax or other regulatory requirements.
- Consent: where consent is required, including for certain optional cookies, affiliate tracking technologies or marketing activities.
Where Dalilou processes website visitor information solely on behalf of a customer, the customer is responsible for determining the appropriate legal basis for that processing.
AI processing, qualification and lead scoring
Dalilou uses artificial intelligence to process conversations and assist customers with tasks such as understanding visitor intent, answering questions, qualifying opportunities and generating lead scores.
AI-generated classifications and scores are intended to help business customers prioritize and manage enquiries. They may not always be accurate and should not be treated as the sole basis for decisions that have legal or similarly significant effects on an individual.
The business customer remains responsible for how it uses Dalilou’s outputs and any decisions it makes based on them.
Visitor conversation data
When a visitor interacts with Dalilou on a customer website, information submitted during the conversation may be processed in order to provide the Sales Agent service.
This may include conversation messages, contact details, qualification responses, lead information and appointment-related information.
The Dalilou customer determines how the Sales Agent is deployed and what information it requests from visitors. Customers are responsible for configuring their use of Dalilou in accordance with applicable privacy and data-protection laws.
Google Workspace API data and Limited Use
When a customer chooses to connect a Google Workspace service, including Google Calendar, Dalilou accesses Google user data only after the customer has granted the relevant permissions through Google OAuth.
Dalilou uses information received from Google APIs only to provide and support user-facing features requested by the customer, such as checking calendar availability, creating or managing bookings, maintaining the connected integration and providing related support and security functionality.
Limited Use commitment. Dalilou’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google Workspace API user data, whether raw, aggregated, anonymized or derived, is not used to develop, improve or train generalized or non-personalized artificial intelligence or machine-learning models.
Dalilou does not sell Google user data, use it for targeted or personalized advertising, or transfer it to data brokers or information resellers. Google user data is not used for creditworthiness, lending, retargeting or interest-based advertising purposes.
We may disclose Google user data only where necessary to provide or secure the customer-requested integration, to service providers acting on our behalf and subject to appropriate confidentiality and data-protection obligations, where directed by the user, or where required by applicable law.
Access to Google Workspace data is limited to the permissions required for the enabled feature. Customers can revoke Dalilou’s Google access through their Google Account permissions and, where available, disconnect the integration from Dalilou.
Shopify integration data
When a merchant installs Dalilou on a Shopify store, Dalilou uses the permissions approved by the merchant to provide the requested e-commerce functionality. Depending on the features enabled, this can include access to product and variant information, inventory or availability data, order and line-item information used for sales attribution, and Shopify Files or media selected by the merchant for supported app features.
Dalilou uses Shopify data to synchronize the merchant’s catalog, answer product questions, generate product recommendations, provide upsell and cross-sell functionality, keep availability information current, attribute Dalilou-assisted orders, display merchant-facing analytics, and operate, secure and troubleshoot the Shopify integration.
Shopify order-attribution records are retained for no more than 12 months while the integration remains active. Catalog data is refreshed as needed to provide the service. Privacy compliance requests and shop erasure events trigger deletion or anonymization as required.
Shopify data is not sold. Dalilou does not sell Shopify merchant or customer data and does not use Shopify data for unrelated targeted advertising. Access is limited to the permissions needed for the features the merchant enables.
Dalilou subscribes to Shopify privacy compliance webhooks, including customer data requests, customer data erasure requests and shop data erasure requests. Dalilou also processes app-uninstall events so that access can be revoked and retained integration data can be deleted, anonymized or otherwise handled in accordance with Shopify requirements, applicable law and legitimate record-retention obligations.
A merchant can remove Dalilou from Shopify through the Shopify admin. Removing the app revokes future API access to that store. Privacy-related questions or requests can also be sent to contact@dalilou.com.
Service providers and subprocessors
We use third-party service providers to operate Dalilou. Depending on the service, these providers may support functions such as cloud infrastructure and hosting, artificial intelligence processing, payment processing, email delivery and notifications, affiliate tracking and referral attribution, analytics, security, monitoring and customer support.
These providers may process personal information only to the extent necessary to provide their services to Dalilou and subject to applicable contractual, confidentiality and security requirements.
Where Dalilou acts as a processor, certain providers may act as subprocessors.
Dalilou may also use a third-party affiliate platform to register partners, manage referral links and identifiers, attribute referrals, record qualifying conversions and support commission administration.
Such processing is limited to information reasonably required to operate, administer and protect the Dalilou Partner Program.
International data transfers
Chabir LLC is established in the United States and Dalilou may use service providers located in the United States or other countries. As a result, personal information may be processed outside the country in which it was originally collected.
Where data-protection law requires safeguards for international transfers, Dalilou uses applicable legal transfer mechanisms, which may include adequacy decisions, Standard Contractual Clauses approved by the European Commission or other legally recognised safeguards.
Information about applicable transfer safeguards may be requested by contacting contact@dalilou.com.
Data retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.
Retention may depend on factors including the duration of a customer account or subscription, customer configuration, contractual requirements, security and fraud-prevention needs, backup cycles and applicable legal, tax or accounting obligations.
Visitor and lead information processed on behalf of customers may also be retained in accordance with the relevant customer agreement and service configuration.
Google Workspace integration data is retained only for as long as reasonably necessary to provide and maintain the connected feature, support security and troubleshooting, comply with user instructions, and satisfy applicable legal obligations. Where applicable, customers may disconnect the integration or revoke Dalilou’s Google access.
Affiliate and partner records may be retained for as long as reasonably necessary to administer the Partner Program, investigate referral or commission disputes, process commissions and payouts, prevent fraud and comply with applicable accounting, tax or legal obligations.
When information is no longer required, we may delete or anonymize it unless continued retention is required by law.
Security
We implement technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss or misuse.
These measures may include access controls, authentication, logging, infrastructure security and other safeguards appropriate to the nature of the information processed.
However, no online service or method of electronic storage can guarantee absolute security.
Cookies and similar technologies
The Dalilou website may use cookies and similar technologies for essential website functionality and, where applicable, analytics, affiliate referral attribution or other optional purposes.
When a visitor reaches Dalilou through an affiliate link, referral information may be stored using cookies or similar technologies so that a later signup or qualifying purchase can be attributed to the referring partner.
The standard attribution window for the Dalilou Partner Program is 60 days.
Affiliate tracking may also involve referral identifiers associated with a signup, customer account, subscription or qualifying transaction in order to preserve and verify referral attribution.
Where required by applicable law, non-essential cookies and similar technologies will be used only after appropriate consent has been obtained.
More information is available in our Cookie Policy.
Your privacy rights
Depending on where you live and which data-protection law applies, you may have rights concerning your personal information, including rights of access, correction, deletion, restriction, objection, portability and withdrawal of consent.
You may also have the right to lodge a complaint with the competent data-protection supervisory authority.
Requests relating to information that Dalilou controls directly may be sent to contact@dalilou.com. We may request information reasonably necessary to verify the identity of the requester.
Partners may also contact Dalilou concerning personal information associated with their Partner Program account, subject to applicable legal and record-retention requirements.
If your request concerns information submitted through a Dalilou Sales Agent on another company’s website, you should generally contact that company first because it may be the controller of that information.
Customers acting as controllers
Business customers are responsible for their own use of Dalilou.
Where a customer determines why and how visitor personal information is collected through its website, that customer generally acts as the controller or business and Dalilou generally acts as its processor or service provider.
Customers are responsible for their privacy notices, legal bases, consent mechanisms where required, data-subject requests and any instructions given to Dalilou concerning the processing of visitor information.
Where required, processing on behalf of customers should also be governed by an appropriate data-processing agreement.
Sensitive information
Dalilou is not designed primarily for collecting special categories of personal information such as health information, biometric information, political opinions, religious beliefs or other sensitive information protected by applicable law.
Customers should not intentionally configure Dalilou to request sensitive information unless they have established a lawful basis and implemented any safeguards required by applicable law.
Children’s privacy
Dalilou is a business-to-business service and is not directed to children.
Customers should not intentionally configure Dalilou to collect personal information from children where doing so would violate applicable law.
European Union representative
Where Chabir LLC is required by applicable data-protection law to appoint a representative in the European Union, the representative’s identity and contact details will be made available in this Privacy Policy.
Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes to Dalilou, the Dalilou Partner Program, our processing activities or applicable law.
When material changes are made, we will update the “Last updated” date at the top of this page and may provide additional notice where appropriate.
Contact
For privacy-related questions or requests:
