What we store
What your assistant keeps
Your account
Your email, a hashed password, your plan, and billing references from PayPal, Razorpay or Stripe. You pay on their own pages or windows, and card, UPI or PayPal account details never reach us.
What it knows
The facts read from your website, your FAQs and corrections, your settings and opening hours.
Documents you add
The text of any price list, menu or brochure you upload. We keep the words, never the file itself, and removing a document deletes its text.
Conversations
What customers wrote and what your assistant replied, with what each answer was based on.
Where a conversation came from
The page of your website a customer asked from, the first page of their visit, the site that sent them and any campaign tags on the link, sent only with a message, never for just visiting. Page addresses are kept without their query strings, and ad click ids are never kept. Not kept at all for medical clinics.
Leads and bookings
The names, phone numbers, emails and details customers chose to give, and bookings made in the chat. For a booking a customer makes on your own booking platform inside the chat, we keep only that it was made and, where the platform says, its time. Their details stay with the platform. Also a customer's answers to any questions you ask your assistant to put to them, and whether the place they gave is on your own list of places you serve.
Emails to your customers
A customer who gives an email address can be sent three kinds of email in your name, each with your address as its reply-to: a copy of what they asked when they leave their details, a booking confirmation and reminder, and your own answer to a question your assistant could not answer, when you choose to send it. We keep when each was sent and the text of an answer you sent. None carries a tracking pixel, and you can turn the copy off in Settings.
Calendar connection
If you connect Google Calendar, an encrypted token that lets it check when you're busy and add bookings.
Where your alerts go
The email addresses you list for lead alerts, a Slack, Microsoft Teams or Google Chat address if you add one, and, for each phone or computer you turn alerts on for, the address its browser gave us to send notifications to. A device is forgotten when you sign out on it or remove it.
Abuse prevention
IP addresses are used to limit abuse of the chat, the demo and the sample assistants on our industry pages, and those records are deleted within a day. What a visitor types into a sample assistant is not stored at all.
Subprocessors
Every service that receives your data
- Anthropic (Claude API)
- Always. Writes your assistant's answers with Claude unless you choose a Gemini model, reads your website's pages and documents to pull out the facts your assistant answers from, and translates and summarises conversations. It receives the conversations, your facts and FAQs, and the text of your pages and documents. Under Anthropic's Commercial Terms, Anthropic may not train its models on what we send through its API.
- Google (Gemini API)
- As a backup, and if you choose a Gemini model. When Anthropic can't take a request, the same job goes to Google instead, with the same data; on paid plans it writes your assistant's answers if you choose a Gemini model. On the paid Gemini API we use, Google doesn't use prompts or responses to improve its products.
- Oracle Cloud Infrastructure
- Always. Hosts the app that serves your dashboard and the chat, and our database, which stores your account, what your assistant knows, conversations, leads and bookings. Both are in India (Mumbai).
- Resend
- Always, for email: delivers your lead alerts, password resets and account emails, and the emails sent to your customers in your name. It receives the lead details in each alert and the text of each of those emails.
- Twilio or Plivo
- Only once text alerts are switched on, which they aren't yet. It would then carry each text, so it would receive the lead details in the alert. It would also carry WhatsApp messages and phone calls, but only if those channels are switched on too.
- Meta (WhatsApp)
- Only if WhatsApp is switched on, which it isn't yet. It would then carry those messages, under WhatsApp's own terms.
- Google Calendar
- Only if you connect it: checks when you're busy and adds bookings.
- PayPal
- Only if you pay for a plan with PayPal: handles the subscription. It receives your account email and the plan you chose; your PayPal login and payment details go to PayPal directly.
- Razorpay
- Only if you pay for a plan in rupees: handles the subscription, in India. It receives your account email and the plan you chose; card, UPI and bank details go to Razorpay directly.
- Stripe
- Only if you pay for a plan or add-on by card: handles the subscription. It receives your account email; card details go to Stripe directly.
- Your own webhook
- Only if you add one: receives each new lead's details.
- Your booking platform (Calendly, Cal.com, Acuity, Setmore or YouCanBookMe)
- Only if you paste a booking link from one of them: its booking page is shown inside the chat when a customer asks to book, loaded from that platform by the customer's own browser. It receives what the customer types into it, plus their name and email if they already gave them in the chat.
- Slack, Microsoft Teams or Google Chat
- Only if you paste one of their incoming-webhook addresses on Integrations: it receives each alert, with the lead's details in it, in the channel you chose.
- Your browser's notification service (Google, Apple, Mozilla or Microsoft)
- Only if you turn on alerts on a phone or computer: it carries each notification to that device, encrypted so only your browser can read it. A notification names the customer and your website, never their phone number, email or message.
How it's protected
Security controls
HTTPS throughout
Your dashboard and the chat are served over HTTPS, and we call the services above over HTTPS.
Encrypted calendar tokens
Google Calendar tokens are encrypted with AES-256-GCM, and short-lived access tokens are never stored.
Checked on every request
Every dashboard page and action checks that the account signed in owns the website it's acting on.
Signed links and webhooks
The "I've got this" link in alerts and every webhook are signed, so they can't be forged.
Your domain only
Your assistant only reads pages on your own domain, and blocks requests to private network addresses.
Limits on public endpoints
The chat, demo and forms are rate limited to stop abuse.
Only on your websites
Your chat only appears on your own domain and any sites you add. Your browser refuses to show it anywhere else, so nobody can copy your snippet onto their site.
You choose how long it's kept
Set conversations and leads to delete themselves after 3, 6, 12 or 24 months, or keep them until you delete your account. Off by default, because it's your data to decide about.
Two-step sign-in
Turn on codes from an authenticator app, with one-time backup codes, so a stolen password alone can't open your account. Its secrets are stored encrypted.
What we don't claim
What we don't offer yet
Security pages tend to list badges. Here's what we don't have, so you can decide with the facts.
- We don't sign HIPAA business associate agreements. Don't use it to collect patients' health information; dental assistants are set up never to ask for it.
- We don't have a SOC 2 report, a penetration test or any other third-party audit yet.
- There's no single sign-on or team accounts yet.
Questions
Chatbot security questions
Is my data used to train AI models?
No. We don't train AI models on your data. Your assistant's answers are written by a Claude model through Anthropic's API unless you choose a Gemini model, and Anthropic's Commercial Terms say Anthropic may not train models on that content. Anthropic deletes it within 30 days by default, and keeps it longer only to enforce its usage policy or where the law requires. Your website's pages and documents are read the same way. Google's paid Gemini API takes over when Anthropic can't, and writes your answers if you choose a Gemini model, and Google's Gemini API terms for paid services say Google doesn't use your prompts or responses to improve its products. The same terms say Google logs them for a limited period of time, solely to detect and prevent violations of its Prohibited Use Policy and for any required legal or regulatory disclosures.
Where is my data stored?
The app runs on Oracle Cloud Infrastructure's India West (Mumbai) region, and so does its database, on the same server, so your data isn't sent to another company to be stored. Oracle's Block Volume service always encrypts the disks it is stored on, with AES-256. The other services above handle data under their own terms, such as Stripe's and Resend's data processing agreements. Data from the EEA, UK or Switzerland is protected by the European Commission's Standard Contractual Clauses (with the UK Addendum) or equivalent safeguards in each provider's terms, and we'll send a copy on request.
Is the chatbot HIPAA compliant?
No. We don't sign business associate agreements, so don't use it to collect patients' health information. Dental assistants are set up never to ask for symptoms, medical history or medications. Medical clinic assistants are information-only: they never ask for contact or health details, and their chats are stored without the text.
What are the security risks of a website chatbot?
The main ones are a chatbot inventing information, customers sharing sensitive details in chat, and unprotected integrations. Ours answers only from your facts, business types are set up never to ask for sensitive details like SSNs or card numbers, and alerts and webhooks are signed.
Can customers tell they're talking to an AI?
Yes. Every chat shows "AI assistant for" your business at the top before a customer types, and law firm assistants also say they aren't a lawyer.
How do I delete my data?
Delete your whole account yourself from the page listing your assistants. It cancels any subscription, disconnects Google Calendar, and erases your websites, conversations, leads and bookings.
Where can I ask a security question?
Email us from the contact page. For anything about data we hold on you, the privacy policy explains your options.