1. Introduction
Chelon AI ("we," "our," or "us") is committed to protecting the privacy and personal data of our clients and their end-users. This policy explains how we collect, process, and protect data within our AI-driven automation services and website, in full compliance with the General Data Protection Regulation (GDPR).

2. Our Role as a Data Processor
In the context of our AI Agency services, Chelon AI acts as a Data Processor. Our clients (Real Estate Agencies) act as the Data Controllers. We process personal data only according to the documented instructions of our clients and for the purposes of qualifying leads, scheduling appointments, and managing real estate inquiries.
International Data Transfers
Some of our sub-processors are located outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs), to protect your data.

3. Data Collection and Purpose

We process the following categories of data:

Contact Details: Name, email address, phone number.

Conversation Data: Transcripts of interactions between end-users and our AI Agents.

Property Preferences: Information regarding buying/renting budgets, location preferences, and timelines.

Technical Data: IP addresses and cookies for website functionality.

Purpose of Processing: To automate customer service, qualify high-intent real estate leads, and synchronize data with client CRM systems.
Legal Basis for Processing
We process personal data based on one or more of the following legal grounds: user consent, the performance of a contract, or our legitimate interest in providing and improving our services.

4. AI Processing & Automated Decision Making
Transparency: Every user interacting with our AI will be clearly informed that they are communicating with an artificial intelligence.

Human-in-the-loop: Our AI does not make final legal or financial decisions. All AI-qualified leads are subject to human review and final approval by a licensed real estate professional.

Logic: The AI processes data based on predefined business logic provided by the client.

5. Data Security & AI Training
No Public Training: We do NOT use personal data or client-specific conversation logs to train public foundations of Large Language Models (LLMs) like OpenAI’s public ChatGPT. All data processing is done via secure, private API instances.

Encryption: All data is encrypted at rest and in transit using industry-standard SSL/TLS protocols.

6. Sub-processors
To provide our AI services, we use specialized sub-processors that comply with GDPR standards. Where these providers are based outside the EEA (e.g., USA), we utilize Standard Contractual Clauses (SCCs) to ensure an equivalent level of data protection:

OpenAI / Anthropic: AI Intelligence and Language Processing.

Make.com: Workflow Automation and Data Routing.

GoHighLevel: CRM Storage and Communication Hosting.

7. User Rights
Under GDPR, users have the following rights:

Right to Access: Request a copy of the data held about them.

Right to Rectification: Request correction of inaccurate data.

Right to Erasure: Request the total deletion of their personal data.

Right to Object: Opt-out of AI-driven processing and request a human representative.
Right to Withdraw Consent: Users can withdraw their consent at any time without affecting the lawfulness of prior processing.
AI Transparency:
Users are always informed when they are interacting with an AI system and can request human assistance at any time.

8. Data Retention:
We retain personal data only for as long as necessary to fulfill the specific real estate inquiry or as required by the legal obligations of our clients.

9. Cookies:
Our website may use cookies and similar technologies to improve user experience and analyze website performance. You can control or disable cookies through your browser settings.

10. Contact Us:
For any questions regarding this policy or our data practices, please contact our Data Privacy Officer at:
Email: [email protected]

Last updated: April 2026