Security

Every business isolated

Each business's data is separated row by row in the database (Postgres Row Level Security). Every read and write runs as the business it belongs to.

Every access key belongs to one business and is limited to the permissions it was given. One business's key does not see another.

Where the data lives

Servers, database, files and cache run on Google Cloud in the Tel Aviv region (me-west1).

Replies are phrased by Gemini on Google's Vertex AI, through its global service. Speech recognition for voice calls runs in Google's EU region.

Google does not train models on what passes through Vertex AI, under Google Cloud's terms. We do not train models on your conversations either.

Secrets

Keys, passwords and connections to your systems are kept in Google Secret Manager, not in code or configuration files.

Deletion

You can delete one customer with everything kept about them, set a retention period for conversations and customers, or delete a bot with all its conversations. Every deletion is recorded: what was deleted, when, and who asked.

The public demo

A trial bot is built only after Cloudflare's human check, within limits per address and per day, and from the site's public pages only.

The trial bot's key is kept encrypted in a cookie the browser cannot read, and it reaches only the conversation with that bot and its diagram.