SmartChatAI security How we look after your data.
This is SmartChatAI security and privacy in plain English: where your data and your customers' chats are stored, how they're protected, and what we don't claim. Everything here is true today.
Free plan · No contract · Cancel anytime
At a glance
- Stored on AWS in the United States (us-east-1), not in Australia
- HTTPS for the website, your dashboard and the chat
- Database encrypted at rest, backed up every day, backups kept for 7 days
- No AI training on your content or your customers' chats
- Delete your data any time: email hello@smartchatai.io
Hosting
Where your data is stored
Your chatbot's content and conversations are stored on Amazon Web Services (AWS) in the United States, in the us-east-1 region.
To answer your customers, your chatbot also uses an AI provider (OpenAI's GPT-4o-mini) and search services.
Plainly
- Your data is not stored in Australia.
- We don't hold a SOC 2 report or a similar certification.
Protection
How it's protected
HTTPS everywhere
The website, your dashboard and the chat all use HTTPS, so data is encrypted on its way between browsers and our servers.
Encrypted and backed up
Our database is encrypted at rest. Your data is backed up automatically every day, and backups are kept for 7 days. Backups are stored in the US with the rest of your data.
Connected accounts
The access tokens for Facebook, Instagram, HubSpot, Slack and Notion are stored encrypted.
Sign-in
Passwords are stored hashed, using Django's standard password hashing, never as plain text. You can also sign in with Google.
Payments through Stripe
Payments are handled by Stripe. Your card details never reach our servers.
Your chatbot, your sites
Optionally list your domains in Settings → Domains, so your chatbot only answers on your own websites. Each chatbot has rate limits.
Answers from your content
Your chatbot answers only from your own website, files, text, Q&A and Notion, not the whole internet.
Your data
Your data, your customers' chats
No AI training on your data
We don't train AI models on your content or your customers' chats. OpenAI, which powers your chatbot's answers through its API, doesn't use API data to train its models, and keeps it for up to 30 days to monitor for abuse.
Source: OpenAI, "Your data" (API docs)
How long we keep it
We keep your chats and leads while your account is open, so they're in your Inbox when you need them. Nothing is deleted on a timer.
Deleting your data
To delete your data, including your customers' chats and leads, email hello@smartchatai.io and we'll delete it.
Who can see your account
Only the SmartChatAI team can see your account, and only to support you.
Health and private details
Sensitive information
If your customers might share health or other sensitive details, add a line to your chat's welcome message asking them not to, and mention your chatbot in your own privacy policy.
Legal
Our policies
Our privacy policy and terms of service say how we handle personal information and what you agree to when you use SmartChatAI.
Questions about your data? Email hello@smartchatai.io and our Australian team will help.
Questions
Security questions
Do you train AI on my data?
We don't train AI models on your content or your customers' chats. OpenAI, which powers your chatbot's answers through its API, doesn't use API data to train its models, and keeps it for up to 30 days to monitor for abuse.
How long do you keep chats and leads?
We keep your chats and leads while your account is open, so they're in your Inbox when you need them. Nothing is deleted on a timer.
How do I delete my data?
To delete your data, including your customers' chats and leads, email hello@smartchatai.io and we'll delete it.
Is my data stored in Australia?
No. Your chatbot's content and conversations are stored on Amazon Web Services in the United States (us-east-1), plus the AI and search services that power your chatbot.
Which AI model does my chatbot use?
OpenAI's GPT-4o-mini. Your chatbot answers only from the content you give it: your website, files, text, Q&A and Notion.
Do you have SOC 2 or another certification?
No. We don't hold a SOC 2 report or a similar certification. This page lists what we do today.
Do you see my card details?
No. Payments go through Stripe, and your card details never reach our servers.
Can someone put my chatbot on their website?
You can stop that. Add your own domains in Settings → Domains, and your chatbot only answers on those sites. Each chatbot also has rate limits.