We never train on your data
Your training content, conversations and leads are used to answer your visitors, and for nothing else. We do not train or fine-tune AI models on them.
Security
Your content, your visitors, kept in their place.
- Never used to train AI
- HTTPS everywhere
- Download or delete anytime
Your conversations are yours
An AI product should hold itself to a higher bar on data. Here is ours.
Not used for training by OpenAI
Questions and passages sent to OpenAI to write an answer go through its API, and OpenAI does not train its models on API data.
You own your data
Download everything stored for your account, or delete the account and all of it, under Settings → Your data. No lock-in.
How we protect your data
The safeguards built into every account and every chatbot.
Encrypted in transit
Every page, the chatbot and the dashboard are served only over HTTPS, with HSTS so browsers never fall back to an unencrypted connection.
Each website kept separate
Every website has its own chatbot, training content, conversations and leads. Only the account that owns a website can see its data.
Account protection
Passwords are stored hashed, never in plain text. Email addresses are verified with a one-time code, and sign-in attempts are rate limited per network and per account.
Hardened web app
A strict Content Security Policy, clickjacking protection and locked-down browser permissions are sent on every page.
Abuse limits on the chatbot
The public chatbot limits messages per visitor, per network and per chatbot, and only opens from your own website and the domains you allow.
Vetted subprocessors
We use a short list of providers to run the service, and publish every one of them with what it does.
The details
Exactly what we store, where it goes, and how long it stays.
Your chatbot and its data
Chat transcripts
Conversations are stored so you can read them and improve answers. You can set a retention period in the chatbot settings, after which old transcripts are deleted automatically.
Visitor leads
Names, emails and phone numbers that visitors choose to share are stored with their conversation and shown only to the website owner.
Training files
When you upload a file, we keep the text extracted from it to train your chatbot, not a public copy of the file. Remove a source at any time and it stops being used.
Deleting a website
Deleting a website permanently removes its chatbot, training content and conversations. Leads it collected stay in your account until you delete them, or delete the whole account under Settings → Your data. Need help? Write to support@patchwhistle.com.
How AI is used
OpenAI as our AI processor
To answer a question, we send the question and the most relevant passages from your content to OpenAI, which writes the answer.
Answers only from your content
The chatbot is told to use only the passages we send, and we check answers before visitors see them: a price, phone number, email or link that is not in your content is removed.
The public chatbot
Monthly message limit
Each chatbot stops at its plan’s monthly message limit, and we email you when it is reached.
Tied to your website
Browsers can only open your chatbot from your own website (with or without www), any extra domains you allow in its settings, and its shareable chat page if you turn that page on.
Crawling and billing
Public pages only
Training crawls and Monitoring checks only visit publicly reachable pages on the domain you entered. Private, login-protected, local and off-domain addresses are skipped.
Signed billing events
Payments are handled by Dodo Payments; card details never reach us. Plan changes are applied from verified payment webhooks, not from the browser.
Trust and transparency
Everything you need for your own security or privacy review.
Subprocessors
Every third-party service that processes data on our behalf, and what it does.
View listPrivacy notice
What we collect, why, how long we keep it, and your rights.
Read noticeTerms
The agreement that covers your use of Patchwhistle.
Read termsSecurity review or report
Filling in a vendor questionnaire, or found a vulnerability? Write to us and we will reply quickly.
support@patchwhistle.comReady to try your chatbot?
Paste your website address, test the answers, and put it live with one line of code. Free for 14 days, no card.