Privacy Policy

AI Attendant (“we”, “us”) provides multi-tenant SaaS for website chatbots backed by per-site knowledge bases. This policy applies to apps.aiwebsiteattendant.com, the official WordPress plugin, the Shopify app, and related product surfaces operated by AI Attendant.

We may collect:

• Account details such as name, email, and organization (client) information.
• Billing and subscription data processed by our payment provider (Stripe).
• Product usage data including websites you add, knowledge-base content you upload, conversations, leads captured by the widget, and support tickets.
• Technical data such as IP address, browser type, device identifiers, and cookie or similar identifiers needed for authentication, security, and (when enabled) analytics.

We use information to:

• Provide, secure, and improve the AI Attendant service.
• Authenticate users, enforce plan limits, and process subscriptions.
• Generate chatbot answers from your site’s knowledge base via retrieval-augmented generation.
• Respond to support requests and send transactional emails (for example verification or billing).
• Measure marketing funnel performance when you enable optional analytics (see our Cookie Policy).

Content you upload or scrape for a website stays scoped to that website’s knowledge base and your client organization. Chat transcripts and leads from the embed widget are stored so you can review conversations and follow up with visitors. We do not sell customer KB content.

The WordPress.org plugin (Command Modular AI Website Attendant) is free. It connects a WordPress site to an AI Attendant account and serves the chat widget first-party through WordPress. The plugin is not a standalone chatbot: answering visitor chats requires a connected AI Attendant website. Portal subscriptions, if any, are managed in the client portal—not inside WordPress.

When an administrator connects the site, WordPress may send the site hostname, a one-time pairing code and CSRF state (Connect Account), or an API token with optional site ID (API Key connect) to our API at api.aiwebsiteattendant.com. The plugin stores the public site key and connection settings in WordPress options. API tokens are used to complete connect and are not kept as a long-term plugin setting.

To load the widget, WordPress fetches embed scripts from apps.aiwebsiteattendant.com (the public site key may be included as a query parameter). When a visitor uses chat, WordPress reverse-proxies requests to our API. That can include message text, session identifiers, widget config requests, feedback, optional voice audio for transcription, link-preview URLs, and the site Origin/Referer. Conversation and lead records are stored on the connected AI Attendant website, including a visitor’s name, email, or phone if they share it in chat.

Disconnecting the plugin in WordPress clears local connection settings on that site. It does not automatically delete portal account data, knowledge bases, conversations, or leads. Site owners or visitors can request access or deletion by emailing privacy@aiwebsiteattendant.com.

The Shopify App Store listing is free. The app only helps merchants enable a first-party theme embed so the attendant loads on the shop domain. It does not sell plans or charge through Shopify Billing. Portal subscriptions, if any, are managed separately in the AI Attendant client portal.

When a merchant connects a store, we store the shop domain, connection status, and (when issued) an offline access token used only to identify the shop through Shopify’s Admin GraphQL API. Storefront chat may create conversation and lead records for that connected website, including a visitor’s name, email, or phone if they share it in chat.

We honor Shopify GDPR webhooks: customers/data_request, customers/redact, shop/redact, and app/uninstalled. Customer data requests look up matching leads for the connected shop. Redact and uninstall events remove or anonymize that shop’s customer contact details and disconnect the store. Merchants or shoppers can also email privacy@aiwebsiteattendant.com.

We share data with subprocessors only as needed to run the product (for example hosting, email, payments, and model providers). We may disclose information if required by law or to protect the security and integrity of the service.

We retain account and product data for as long as your subscription is active and as needed for legal, billing, and security purposes afterward. We apply reasonable technical and organizational measures, including access controls and encrypted transport.

You may update profile details in the portal, manage cookies as described in the Cookie Policy, and request access or deletion of personal data by contacting us. Some requests may be limited by legal or operational requirements (for example invoice records).

For privacy questions, email privacy@aiwebsiteattendant.com.