Loading
Privacy
Personal data is removed from a message on the visitor's own device, before it is sent. Messages that arrive through the API and other channels are redacted on the server, and secrets that have to be stored are encrypted field by field.
256 Bit AES-GCM keys
Emails, phone numbers, card numbers and national IDs removed before a message leaves the browser.
The widget removes email addresses, phone numbers, payment card numbers and national identifiers in the visitor's browser, so they are never sent, stored or passed to an AI provider. Messages from the API and channel integrations go through the same redaction on the server before they are stored. Two-factor secrets and integration tokens are encrypted with AES-256-GCM and a fresh IV for every value, so a tampered value fails to decrypt instead of reading as something else.
Organisations that handle personal data under GDPR and want it kept out of transcripts, logs and AI providers.