What we collect, why we collect it, who we share it with, and what you can tell us to do about it.
Last updated 30 July 2026
gloss lets brands open a shoppable storefront inside the channels their customers already use, like SMS, WhatsApp, Instagram and TikTok.
We collect your name, email, company and job role when you sign up, and we measure how people use the site. We do not sell your information. You can ask us to show you what we hold, correct it, or delete it, at any time, by emailing support@chatinc.com.
One thing worth knowing up front, because most policies bury it: we record how people move around the site, including mouse movement and clicks. Details are in section IV.
This policy covers you dealing with gloss: visiting thisisgloss.com, filling in a form, starting a trial, or using a gloss account.
It does not cover shoppers using a brand's storefront. If you bought something through a gloss experience built by a brand, that brand decides what happens to your information and you should contact them. We only handle it on their instructions. Write to us anyway if you cannot reach them and we will pass it on.
| Where | What |
|---|---|
| Sign-up forms | Name, email, company, job role |
| Starting a trial | The above, plus your organisation name and a password. Passwords are handled by Google Firebase and stored hashed. We never see yours. |
| Call me back | Name, email, phone, business, and anything you write in the message |
| Emailing us | Whatever is in the email |
| What | Why |
|---|---|
| Your IP address | Stopping spam and abuse on our forms, and ordinary server logs |
| Browser and device | Making sure the site works on what you are using |
| Which ad or page sent you | Knowing which campaigns work. We never put your name or email in a web address. |
| How you use the site | Pages, clicks, scrolling, time on page. See section IV. |
We never ask for anything sensitive: no health, religion, politics, biometrics or anything of that kind.
Some cookies are needed for the site to work. Others help us understand how it is used or measure our advertising.
| Cookie | What it does |
|---|---|
gloss_prefill | Carries what you typed on the marketing site over to the sign-up page so you do not type it twice. Expires after 10 minutes. |
session_token | Keeps you signed in. The site will not work without it. |
konekt_plan, konekt_trial_ends | Show your plan and how many days of your trial are left |
konekt_user_*, konekt_org_id | Identify you and your organisation inside the product |
konekt_session_id | Keeps a shopping bag together across pages |
We use Microsoft Clarity, which records your visit and plays it back to us: your mouse movements, clicks, scrolling and the pages you move through , along with heatmaps of where people click. We use it to find broken layouts and steps that confuse people. We do not use it to identify you.
We use Google Analytics to count visits and see which pages and campaigns work, with IP anonymisation switched on. We use the Meta pixel to measure how our Facebook and Instagram adverts perform and to reach people who have visited us. Meta may match that to a Facebook or Instagram account. You can control a lot of this in your Meta account settings.
You can block or delete cookies in your browser settings, and you can opt out of Google Analytics with Google's browser add-on. Blocking the necessary cookies will stop you signing in.
We rely on your consent for analytics and advertising, and you can withdraw it. Everything else is either necessary to give you the service you asked for, required by law, or a genuine business need that does not override your privacy.
We do not sell your information. We use these companies to run the service, and they only handle your information to do a job for us.
| Who | What for |
|---|---|
| HubSpot | Our CRM. Form submissions go here. |
| Google Cloud and Firebase | Sign-in, and the database behind the product |
| Google Analytics | Website analytics |
| Microsoft Clarity | Session recording and heatmaps |
| Meta | Advertising measurement |
| Vercel | Hosting |
| Shopify and WooCommerce | Where a brand connects a store, product and order data moves between gloss and that store |
We will also hand over information if the law requires it, and if the business is ever sold or merged we will tell you before your information moves.
We are in South Africa and some of the companies above are in the United States and Europe, so your information travels. When it does, we make sure there is a contract in place requiring them to protect it to the same standard we do.
We keep your information only as long as we need it, then delete it or strip your identity out of it.
Ask us to delete something sooner and we will, unless we are legally required to keep it.
Everything travels over an encrypted connection. Sign-in sessions are held in cookies that scripts cannot read. Access is limited to the people who need it. Passwords are handled and hashed by Google Firebase, so we never hold yours.
No system is perfectly safe. If something happens that affects your information, we will tell you and the regulator as quickly as we can.
Wherever you are, you can ask us to:
Email support@chatinc.com and we will sort it out, normally within a month. It is free, and we may need to check you are who you say you are first.
South African law (POPIA), European and UK law (GDPR) and Californian law all give you these rights, and we apply them to everyone rather than checking where you live first.
gloss is a business product. We do not knowingly collect information from anyone under 18. If we have, tell us and we will delete it.
Questions, requests or complaints go to support@chatinc.com. We would much rather hear from you directly and fix it.
If we cannot resolve it, you can complain to the Information Regulator in South Africa, the ICO in the UK, or your local data protection authority in Europe.
We update this policy as the product changes. The date at the top tells you which version you are reading, and we will let you know directly if anything important changes.