Privacy Policy
1. Data Controller
MakanChatEmail: makanchat.ai@gmail.com
2. Overview
MakanChat is an AI-powered chat service that helps users discover halal-verified restaurants and dining recommendations via Telegram. When you use MakanChat, personal data is processed as described in this policy.
Important: Please do not share sensitive personal data (e.g. health information, financial details, passwords, or identification numbers) in your chat messages. Chat content is processed by AI systems and third-party providers as described below.
3. Data We Collect
3.1 User Data
- Telegram user ID and username
- Chat messages (text inputs you send to MakanChat)
- Preferred location or dining preferences shared in chat
3.2 Technical Data
- IP address, browser type, operating system, referrer URL, and time of access
- These server log entries are retained for a maximum of 30 days
3.3 AI Processing Data
- Chat messages are processed by AI providers to generate restaurant recommendations
- Messages are not stored on our servers beyond what is necessary for the session
- No audio files are stored; transcription (where applicable) is processed in memory only
4. Purpose and Legal Basis
| Purpose | Legal Basis |
|---|---|
| Providing the AI chat and restaurant recommendation service | Art. 6(1)(b) GDPR — performance of a contract |
| AI-assisted response generation | Art. 6(1)(b) GDPR — performance of a contract |
| Server logs and IT security | Art. 6(1)(f) GDPR — legitimate interest in securing the service |
5. Processors and Third Parties
To deliver MakanChat, we use the following service providers. All US-based providers operate under Data Processing Agreements (DPA) with Standard Contractual Clauses (SCCs).
5.1 Anthropic, PBC (USA) — AI Text Processing
Chat messages may be transmitted to Anthropic's Claude API to generate responses. Anthropic processes this data in accordance with their privacy policy. A DPA with SCCs is in place.
5.2 OpenAI, Inc. (USA) — AI Processing (Fallback)
If the primary AI service is unavailable, requests may be processed via OpenAI's API. A DPA with SCCs is in place. OpenAI privacy policy.
5.3 Groq, Inc. (USA) — AI Processing
Some requests may be routed via Groq's API. Data is not retained by Groq after processing. A DPA with SCCs is in place. Groq privacy policy.
5.4 Hetzner Online GmbH — Hosting
Our servers are operated by Hetzner. Hetzner privacy policy.
5.5 Telegram Messenger Inc. — Message Delivery
Messages are delivered via the Telegram Bot API. Telegram processes message data in accordance with their privacy policy.
6. International Data Transfers
Data is transferred to service providers based in the United States (Anthropic, OpenAI, Groq). These transfers are carried out on the basis of Standard Contractual Clauses (SCCs) pursuant to applicable data protection law and, where applicable, the Data Privacy Framework (DPF). We have concluded Data Processing Agreements (DPA) with all US-based providers.
Hosting and data storage are provided by Hetzner.
7. Retention Periods
- Chat messages processed by AI: Not stored on our servers beyond the session
- Server logs: Maximum 30 days
- Account data: Until deletion by the user or 2 years after last activity
9. Your Rights
Under GDPR you have the following rights:
- Right of access (Art. 15 GDPR) — to find out what data we hold about you
- Right to rectification (Art. 16 GDPR) — to correct inaccurate data
- Right to erasure (Art. 17 GDPR) — to request deletion of your data
- Right to restriction (Art. 18 GDPR) — to restrict processing of your data
- Right to data portability (Art. 20 GDPR) — to receive your data in a machine-readable format
- Right to object (Art. 21 GDPR) — to object to processing based on legitimate interest
To exercise any of these rights, please contact us by email:
makanchat.ai@gmail.com
We will respond within one month.
10. Right to Lodge a Complaint
You have the right to lodge a complaint with the data protection supervisory authority in your country of residence or the country where the alleged infringement occurred.