Privacy and GDPR
How long conversations are kept, who can see them, and how ORYVOX protects your data and tools.
How long conversations are kept
You choose in the chatbot's AI and ORYVOX Core section:
| Mode | What happens |
|---|---|
| Standard | Conversations are kept for the number of days you set (90 by default), then deleted. |
| Zero retention | Content is kept only while the conversation runs; afterwards only statistics remain, without any text. |
Visitors can see and delete what the chatbot remembered about them.
In the conversation
- The chatbot never reveals its instructions, settings or its whole knowledge, however it is asked.
- Orders and customer data are shown only after the visitor's identity is confirmed (for example, order number and email must match).
- Knowledge can be Public, Customers only (signed-in customers, see Visitor identity) or Internal (your team only).
Your team
- Every member has a role with clear permissions.
- Important actions, such as connecting an integration, changing a tool's permissions or adding knowledge, go to the audit log.
- Sensitive actions in Security ask for your password again.
Your tools
- Keys and tokens are stored encrypted and never shown in the interface.
- Google, Microsoft and Salesforce connect through their own sign-in; ORYVOX never sees your passwords.
- ORYVOX connects only to public addresses: internal networks,
localhostand private IPs are refused. - The website chat gets only sending and reading actions; writing to your tools is left to agents and automations, see Integrations.
Questions
Write to [email protected] about security, or [email protected] about your data.
Was this page helpful?