Home

Privacy Policy

Last updated: 2026-07-06

SupportBot is a self-hosted product: customer conversations, the knowledge base, and configuration are stored on the installing business's own server. This policy explains what data is processed where.

1. Data Controller

The business hosting SupportBot is the data controller for its own customers' data. The software's developers have no access to any installation's data.

2. Data Processed

Through the chat widget: conversation content, any name/contact details the visitor provides, and page-URL-level campaign data (utm parameters, referring page — query strings are not collected).

The widget uses no cookies or fingerprinting techniques. The browser's local storage is used for conversation continuity.

3. AI Processing

To generate bot replies, conversation text is sent to the LLM provider chosen by the installation owner (e.g. Anthropic, OpenAI, Google). Which provider is used, and that provider's data terms, are the installation owner's choice.

4. Retention and Deletion

Conversation records live in the installation's own database. Bot message logs are purged automatically after 90 days and processed webhook records after 30 days; other data follows the installation owner's retention policy.

5. This Website

This marketing site uses no analytics cookies and builds no visitor profiles. If you use the chat widget on this site, the widget terms above apply.

6. Your Rights and Contact

For requests about your data (access, correction, deletion), contact the business operating the installation. For questions about the software, reach out via the GitHub repository.