Answely
Get started

Template Text for Your Privacy Policy

A ready-made section that you can include in your website's privacy policy – in two versions, short and detailed. Below it, you will find what you need to fill in, the passages at which the text is no longer accurate once you switch on a feature, and what belongs in your cookie and storage overview.

Before you use the text

This is not legal advice. The template describes what Answely actually does – not what is legally sufficient in your case. You are the controller for your website; the completeness and accuracy of your privacy policy are your responsibility. Have the text reviewed before you publish it.

Three things the template assumes:

  • You have accepted the data processing agreement. It is concluded upon registration and is available under DPA.
  • Your settings correspond to the defaults. For new websites, "Allow answer cache" is off and all optional features are off. If you have switched anything on, you need the corresponding additional paragraph from the section "Passages at which the text is no longer accurate".
  • You have checked the legal basis for your website. The template refers to your legitimate interests. If you want the box to start only after consent has been given, switch on consent mode and replace the legal basis (additional paragraph 4).

What your visitors type into the answer box is free text. Even though Answely stores none of it in its default setting, a question may contain personal or sensitive information. If you operate a website on which this is likely – for example a medical practice, a counselling service or a public authority – consider consent mode and a notice directly at the search field.

The short template

For privacy policies that contain one paragraph per service. Replace the passages in square brackets.

AI answers in search (Answely)

On this website, we supplement the search function with short, AI-generated answers with links to the pages on which they are based. For this purpose, we use Answely, a service of LW IT Solutions Company Lukas Wójcik, al. Tadeusza Kościuszki 80/82 lok. 301, 90-437 Łódź, Poland, which acts on our behalf (processing on behalf of a controller under Article 28 GDPR).

If you ask a question in the search field, your browser sends the following to Answely in encrypted form: the question (no more than 300 characters), the language and the address of the current page and of the referring page, in each case without parameters and anchors. Answely matches the question against the public pages of our website and has the answer formulated by a language model on Answely's own servers. The AI processing takes place exclusively on servers in the EU; your input is not used to train AI models. Every answer is labelled as AI-generated; it may be incomplete or incorrect, and the linked pages are authoritative.

Your question and the answer are not stored. Answely does not set any cookies, does not store anything in your browser and does not generate any identifier that recognises you. To protect against misuse, a hash is briefly generated from your IP address (for no more than 2 minutes); in counters and logs, your IP address appears only in truncated form and without your question, and these entries are deleted after 7 days.

The legal basis is our legitimate interest in answering questions about the content of our website quickly (Article 6(1)(f) GDPR). Please do not enter any confidential information in the search field. You can exercise your rights against us: [YOUR CONTACT ADDRESS].

The detailed template

For privacy policies that list categories of data, purposes, recipients and time limits individually, and for sectors that are subject to closer scrutiny.

AI answers in search (Answely)

Purpose and description. On this website, we supplement the search function with short, AI-generated answers. If you ask a question in the search field, an answer appears next to the search results; it is generated exclusively from the content of our own website and links to the pages on which it is based. If no supporting source is found, the answer box says so instead of making something up.

Provider. LW IT Solutions Company Lukas Wójcik, al. Tadeusza Kościuszki 80/82 lok. 301, 90-437 Łódź, Poland. Answely is our processor under Article 28 GDPR and processes the data exclusively on our instructions, not for its own purposes.

Data processed. Your browser sends data only if your input looks like a question: the question (no more than 300 characters), the language set, and the address of the current page and of the referring page, both without parameters and anchors. If you ask a follow-up question in the box, up to three previous rounds of this conversation are sent along so that the answer takes the context into account. For technical reasons, Answely also receives your IP address and your browser's identifier (user agent), as with every retrieval of a web page.

How the answer is generated. Answely matches the question against an index of the public pages of our website and has a language model formulate an answer from it. The language model and the search run on Answely's own servers in Łódź, Poland; the AI processing takes place exclusively on servers in the EU. No external AI service is involved. Neither your questions nor the answers nor our content are used to train or fine-tune AI models.

Labelling. Every answer is labelled as AI-generated (Article 50 of the AI Act). It may be incomplete, out of date or incorrect. The linked pages are authoritative; for binding information, please contact us.

Storage. Your question and the answer are not stored; they are held only in the working memory of Answely's servers while the answer is being generated. Neither questions nor answers are written to logs.

Your IP address. To protect against misuse, Answely generates a hash from your IP address and a random value that changes daily; this hash exists for no more than 2 minutes, and the address itself is not stored for this purpose. In content-free counters (time, length of the question, result, duration) and in the web server's access log, your IP address appears only in truncated form (IPv4 without the last octet, IPv6 reduced to the first 48 bits) and without your question. These entries are deleted after 7 days.

Storage on your device. Answely does not set any cookies and, in its default setting, does not store anything in your browser.

Legal basis. Our legitimate interest in answering questions about the content of our website quickly and with supporting sources (Article 6(1)(f) GDPR). The answer box is an add-on; the search function also works without it.

Place of processing and recipients. Processing takes place on Answely's own servers in Łódź, Poland. For backup purposes, a copy of the databases is encrypted every night on Answely's server and then stored with Google Cloud Storage in Warsaw (region europe-central2); only Answely can decrypt it. Before transfer, each daily copy (dumps of all databases on the server and a file copy of /var/www including configuration files) is kept unencrypted for no more than 8 days on a storage device attached to Answely's server in Łódź. Truncated IP addresses from the counters may be contained in it until the respective copy expires. No transfer to countries outside the EU takes place. The list of sub-processors is available at https://answely.com/en/legal/subprocessors.

Your rights. You have the right of access, rectification, erasure, restriction of processing, objection and data portability, as well as the right to lodge a complaint with a supervisory authority. To exercise these rights, please contact us: [YOUR CONTACT ADDRESS]. Because Answely does not recognise you and does not store questions, an individual question generally cannot be attributed to anyone (Article 11 GDPR).

What you need to fill in

PassageWhat belongs there
[YOUR CONTACT ADDRESS]Your own postal address or email for data protection matters, not ours. You are the controller and the first point of contact for your visitors' data.
[HOW TO WITHDRAW CONSENT]only with consent mode: how your visitors withdraw their consent, for example "via the Cookie settings link in the page footer".
Legal basisKeep point (f) or replace it with the paragraph on consent mode.
HeadingAdapt it to the structure of your privacy policy. The name of the service should appear in it so that a visitor can find it.
Address of the sub-processorsKeep the link; it always shows the current list.

Passages at which the text is no longer accurate

The template describes the default settings. If you switch on a feature, a correct sentence becomes an incorrect or incomplete promise – which is then published on your website. For each feature, there follows a paragraph that you add or use to replace an existing one.

1. If you switch on "Allow answer cache"

The sentence "Your question and the answer are not stored" is then incorrect, as is "does not store anything in your browser". Replace both with:

So that a repeated question does not have to be recalculated, the answer, including its sources, is cached for 24 hours under a hash value of the question. In your browser, the search function stores its settings in sessionStorage for 5 minutes; they contain no information about you. Even then, no cookies are set.

If your website is connected via reactive.chat, the search function additionally stores answers for 10 minutes, whose entry contains the question (additional paragraph 10).

2. If you switch on question analysis

Question analysis requires "Allow answer cache" to be switched on; in that case, also include additional paragraph 1. Add:

In order to improve our content, we analyse which questions are asked in the search and where our pages do not provide an answer (Answely question analysis). For this purpose, Answely stores for each answer: your question, in which email addresses, telephone numbers, IBAN-like sequences of digits, links and long numbers are masked before storage; the calendar day (without the time of day); the language; whether a supported answer was found; the addresses of the pages cited; and the duration. Your IP address, an identifier of your browser, the answer and the address of the page on which you asked the question are not stored. We only see groups of similar questions comprising at least two questions, never individual questions. Question analysis entries are deleted after 90 days. The legal basis is our legitimate interest in aligning our website with our visitors' questions (Article 6(1)(f) GDPR).

Being honest with your visitors includes this: the masking does not recognise names, addresses written out in words, or diagnoses. If you switch on the monthly knowledge gap report, the same groups are sent by email to the owner of your workspace. Sending is handled by Answely's email provider, Namecheap Private Email (Namecheap, Inc., USA), on the basis of the EU standard contractual clauses. These masked question texts therefore leave the EU; the sentence "No transfer to countries outside the EU takes place" in the paragraph "Place of processing and recipients" is then no longer accurate. In this case, replace it with:

The AI processing takes place exclusively on servers in the EU. Once a month, we receive an overview from Answely by email with groups of similar, masked questions; it is sent via Answely's email provider, Namecheap, Inc. (USA). This transfer is based on the EU standard contractual clauses (Article 46(2)(c) GDPR).

Also include the report in your record of processing activities.

3. If you switch on rating, success measurement or A/B comparison

For the "helpful" and "not helpful" buttons (part of question analysis), add the following in additional paragraph 2 after "and the duration":

and, if you use one of the "helpful" or "not helpful" buttons, your rating; for this purpose, your browser sends only a random identifier of the answer and your choice.

For success measurement ("solved" or "not solved", optionally with your own goal) and the A/B comparison of two presentations, add:

In order to measure whether the answers are helpful, the box may ask whether your query has been resolved and may compare two presentations. For this purpose, each answer receives a random one-time identifier and a comparison group in a signed token, which is valid for no more than 24 hours and is held only in your browser's working memory. From this, Answely counts only totals per group and calendar day; questions, answers, page addresses and IP addresses are not included, and we see only these totals. The daily totals are deleted after no more than 30 days. No profile is created.

If you call Answely.ziel() yourself for goal measurement, for example after an appointment has been booked, name this goal in your privacy policy. If a consent requirement applies to measurement in your case, use consent mode: without consent, nothing is then reported.

4. If you switch on consent mode

Replace the legal basis and add:

The AI answers in search are active only after you have given your consent. Before that, your browser does not send any request to Answely and does not store anything. The legal basis is your consent (Article 6(1)(a) GDPR). You may withdraw it at any time with effect for the future: [HOW TO WITHDRAW CONSENT]. After that, no further requests are sent and the entries stored in the browser are deleted.

The box recognises consent from consented.eu, from consent management tools based on the IAB TCF standard and from a signal from your page. Your consent management tool must list Answely as a service. The sentence "Before that, your browser does not send any request to Answely" is only true if, after switching the mode on, you use the modified embed code with data-consent="required" on your website; with the old code, the box still retrieves its settings before consent and, if "Allow answer cache" is switched on, stores them in sessionStorage before consent (rc_ai_k:…). In that case "does not store anything" is not true either; therefore use the modified embed code.

5. If you enable public MCP access

This access does not concern the visitors to your website but AI programs that search your public content. It does not change the template. Because it is public, include it in your record of processing activities and do not make anything confidential available through it. If you wish to disclose it:

Our public content can also be searched by AI programs via a search interface provided by Answely. No answers are generated in the process and no search queries are stored for question analysis; requests are limited using the same short-lived hash as the answer box.

6. If you use a protected knowledge area

This mode has been prepared but has not yet been released for any website with a login system. If you use it, add:

If you are logged in with us, the answer box may also use content that is accessible only to logged-in users. For this purpose, your browser passes an access token from our login system to Answely. Answely verifies it on its own servers in order to determine which content may be searched; the information it contains is not stored and is not passed to the language model. Answers from protected content are cached neither at Answely nor in your browser.

You are responsible for the selection of the content, your users' access rights and your login system. Non-public content belongs exclusively in this mode, never in the public index, the push interface or the WordPress synchronisation.

7. If you integrate live API data

Retrieval takes place from server to server; your visitors are not involved. If you wish to mention it, add:

Answely retrieves individual details in answers (for example stock levels or a price) in real time from our own public data source. Neither your IP address nor your question is passed on in the process.

8. If you use action and support links or the support handover

Answely appends neither the question nor the conversation history to a link; the copy function works only in the browser. If your support destination (form, ticket system, chat) processes the information inserted, that destination and its provider belong in your privacy policy. Add:

If the answer box does not find an answer, you can, if you wish, copy the question, the conversation so far and the sources yourself and hand them over to our support team. Copying takes place only in your browser; only what you send yourself is transmitted.

9. If you pass on the box's events

The box reports technical events to your page (for example "answer ready", duration, number of sources, "rated") as an event in the browser, without the question and the answer. Answely does not send them anywhere. If you forward them to an analytics tool, that is your own processing: name the tool and, where necessary, obtain consent for it.

10. If your website is connected via reactive.chat

In that case, the answers come from the reactive.chat knowledge base, and your IP address and the visitor identifier of the reactive.chat widget are additionally transmitted for the handover to the chat. If "Allow answer cache" is off, your browser receives with the answer a signed history valid for 24 hours (question, answer, up to three sources), which it holds only in the working memory of the page; only when you send a follow-up question in the chat is it passed to reactive.chat and stored there as the beginning of the conversation. The box points this out before sending. If you have deleted your data at reactive.chat or the history can no longer be used, the follow-up question starts a new conversation without this history. If "Allow answer cache" is on, there is no signed history: reactive.chat already keeps the search question and answer as a conversation under its rules, and the follow-up question continues it. In this case, use the reactive.chat template text; it has a separate additional paragraph for these answers ("Smart Answer").

For your cookie and storage overview

Answely does not set any cookies on your website and does not use persistent local storage (localStorage). If you maintain a cookie table, enter at most the following entries under "session storage". They are created only when "Allow answer cache" is switched on, never for protected knowledge areas, in consent mode only after consent has been given, and they are deleted upon withdrawal of consent. Exception: if data-consent="required" is missing from the embed code, the box in consent mode stores the rc_ai_k:… entry before consent (additional paragraph 4).

KeyStoragePurposeDuration
rc_ai_k:…sessionStoragesettings and design of the answer box, so that they are not reloaded on every page; contains no information about the visitor5 minutes, at the latest until the tab is closed
rc_ai_a:…sessionStorageonly for websites connected via reactive.chat: an answer already received, including its sources; the key contains the question asked10 minutes, at the latest until the tab is closed

The script itself deletes expired entries. For websites not connected via reactive.chat, only the first entry is created. The signed token used for success measurement is held only in the page's working memory and disappears when the page is left; it does not belong in the overview.

Where the information comes from

Every sentence of the template can be checked against a document. If you want to delete or rephrase one of them, look there to see what actually happens:

Version 1.0 – as of 18.10.2026