Privacy notice — template only

Important: This is a development placeholder, not a complete production privacy policy. The operator must publish a business-specific, legally reviewed privacy policy and retention schedule before collecting real customer data.

Data processed by this demo

Conversation text, a random chat session identifier, and appointment details supplied voluntarily (name, contact number, optional email). Data is stored in a configured PostgreSQL database and chat messages are sent to the configured AI provider for response generation.

Website and file previews

Submitted public website text and selected business documents/images are sent to the configured AI provider for extraction. The structured draft, source links, text excerpt and preview chat are stored temporarily in PostgreSQL. Access expires after one hour; expired previews are removed on later imports or the configured hourly maintenance task. Uploaded binaries are not stored. Public previews cannot publish customer-facing knowledge. AI API requests use store:false; the provider may apply its own abuse-monitoring retention.

Before production launch

Define lawful purpose and notices; tenant-specific access rights, retention/deletion, data subject requests, vendor agreements, encryption and incident response processes. Avoid collecting sensitive health information in chat.