Privacy Policy

PANTHEON — the AI assistant & website platform at pantheonlabs.info. Last updated: 20 September 2026.

Who we are

This platform (“PANTHEON”, “we”) is operated by PANTHEON Labs. We provide the software that lets a business run an AI assistant on its website and messaging channels. For a business’s own customer data, that business is the data controller and we act as its processor; for this website and the account of the business owner, we are the controller. Contact us about privacy at isaac@pantheonlabs.co.uk.

What we process

Please do not share special-category (sensitive) personal data in a chat.

Messaging channels (WhatsApp / Telegram)

When you message a business that uses PANTHEON on WhatsApp or Telegram, your message is delivered to us by the messaging provider (for WhatsApp, Meta Platforms) and processed by the assistant to generate a reply that is sent back to you on the same channel. We use your number only to reply to your conversation; we do not use it for marketing and we do not sell it. Meta’s handling of WhatsApp messages is also governed by WhatsApp’s own privacy policy.

How we use it & our lawful basis

We never sell your personal data and we do not do cross-site tracking or advertising.

Our AI model & providers (international transfers)

Replies are generated by an AI language model provided by Anthropic. Running the service involves a small number of providers, some outside the UK (principally the USA), with appropriate safeguards (e.g. the UK IDTA or an adequacy decision) where relied upon:

Maps on generated sites

On the contact and area pages of a generated site that has an address, a map is available. It does not load automatically: nothing is requested from a third party until the visitor taps to open the map — not on page load, and not on scrolling past it. If they never open it, no map-related data leaves their browser. When they do open it, their browser loads map tiles and the map library from third parties, which receive their IP address (and the area being viewed):

Loading the map reveals your IP address to Cloudflare, which serves the map library. The map only loads if you tap it, so this does not happen unless you ask for it. Our interest in showing a working map is the lawful basis; tapping is your choice.

Payments

Card payments are handled entirely by Stripe, our payment processor. Your full card details are sent directly to Stripe and are never seen or stored by us; we only receive a confirmation and the last few digits. Stripe processes this data under Stripe’s own privacy policy.

Where a business takes a deposit or payment from you through an assistant, that business is the seller and receives the money into its own Stripe account; we act only as the technology platform connecting the payment and never hold your funds. Any refund is a matter for that business, under the terms it gives you at checkout.

Cookies & local storage

We set no advertising or analytics cookies and do no tracking. A website chat is kept in your browser’s local storage so it persists as you browse; you can clear it anytime. Web fonts are self-hosted, so loading a page does not send your IP to a font provider.

How long we keep it

These are the periods the software enforces, not intentions. Where a period is not enforced automatically, it says so.

Your rights

You may access, correct, delete, restrict or object to processing of your personal data, ask for portability, and withdraw consent at any time — email us at isaac@pantheonlabs.co.uk. You can also complain to the UK Information Commissioner’s Office at ico.org.uk, though we would welcome the chance to put things right first.

Changes

We may update this policy; the “last updated” date above shows when.