Workspace separation
Workspace-owned resources, such as conversations, knowledge and leads, are scoped to the business that owns them.
Security & Trust
Clear boundaries for business support data
See how the product design separates workspace data, manages access and handles website chat, knowledge sources and AI credentials.
Security & Trust
Get startedControls across the support workflow
The platform design applies access checks when someone uses a workspace, submits a widget request or manages billing.
Account and session controls
Email verification, password hashing, optional two-factor sign-in, authenticated sessions and role checks govern access.
Allowed domains and HTTPS
Widget requests use the workspace's approved domain configuration, and HTTPS protects connections in transit.
Private source files
Uploads are type and size checked. Workspace documents are processed with access controls and are kept out of public file URLs.
Server-side AI credentials
The application makes OpenAI requests on the server. The browser embed carries a public workspace identifier.
Administrative audit trail
Administrative actions are recorded for review, including plan and workspace changes.
How website chat reaches the workspace
The public widget starts a conversation for its configured workspace. Workspace roles govern which teammates can read or act on that conversation.
-
Allowed website
A site owner approves the domain before publishing the widget.
-
Workspace scope
The application retrieves knowledge for the conversation's workspace.
-
Authorized people
Team roles govern inbox and settings access. Platform administration is a separate area.
When you need to report a concern
Provide enough information for the team to locate the issue while protecting customer data.
-
1
Describe the issue
Tell us which area was affected and when you observed it.
-
2
Share safe context
Include the relevant URL or reference ID and remove customer data or credentials from screenshots.
-
3
Use the contact route
Choose Security & privacy so the request reaches the appropriate team.
Frequently asked questions
Find the next detail you need before setting up or choosing a plan.
Does the widget expose an OpenAI API key?
The widget's workspace identifier is public. AI credentials are stored and used by the server.
Are workspaces meant to share each other's files or chats?
Workspace-owned records are scoped to the workspace and checked when accessed.
Where can I ask a privacy question?
Use the Security & privacy option on the Contact page.
Explore next
Talk to us about a security or privacy question
Describe the area you want to understand and the context that matters to your business.