Privacy & data.
How the application handles information. The business operating a chatbot is responsible for its visitor privacy notice and requests.
What is stored
Account email and a password hash; chatbot settings; uploaded sources and extracted knowledge; conversation messages; and visitor details collected through configured lead fields. Provider API keys are encrypted in the database. Bot knowledge, settings, and conversations are scoped to individual bots.
When content goes to an AI provider
Local Ollama processing runs on the deployment. If a bot uses a configured cloud provider, its relevant source excerpts, messages, or source samples may be transmitted for responses, embeddings, persona generation, and context analysis. That provider’s retention and processing terms also apply. Do not upload secrets or unnecessary sensitive personal information.
Browser storage
The studio uses session storage for the signed-in session and local storage for the chosen color theme. The widget uses session-scoped identifiers to keep a conversation together. No advertising tracking is added by this interface.
Control and deletion
Account holders can export a bot’s visitor data and erase stored conversations and visitor profiles from Privacy & data. Pause the bot before erasing visitor data. Deleting a bot also removes its sources, settings, vectors, and lead fields. Visitors should contact the business operating the chatbot to request access or deletion.
Retention and backups
Visitor information remains until erased unless the operator enables automatic retention cleanup. Uploaded knowledge remains until removed. Backup copies follow the deployment’s separate backup lifecycle; deleting active records does not rewrite existing backups. The operator must set retention and backup periods appropriate to their business.
AI accuracy and sensitive information
AI responses may be incomplete or incorrect. Avoid sharing sensitive information in chat and verify important answers with the business. Prompt instructions reduce unwanted behavior but cannot guarantee every model response.