Privacy and security

Encrypted in transit (HTTPS with TLS 1.2 or 1.3) and at rest. Hosted on Google Cloud in the United States.
Not used for training: answers are generated with Google's Gemini models on Vertex AI. Your content and conversations are not used to train AI models.
You choose retention: whether visitor conversations are saved, and for how long (30 to 365 days). When saving is on, visitors see "Chats are recorded to improve answers"; when off, only anonymous counts are kept.
You can delete individual conversations, knowledge sources and whole agents.
Allowed websites stop other sites from embedding your agent; daily limits cap usage.
Two-factor sign-in with an authenticator app; passwords follow a strong password policy.
Slack webhook addresses are kept private and never shown to visitors.