Privacy

What gets processed

When a visitor uses a widget on your site, the data they submit (their message) is sent from their browser to the Techvea API, then to the AI provider you've configured for your account (Gemini, OpenAI, or Anthropic), and the conversation is saved in your Techvea account so you can read it. If you switch on hand-off alerts, ticket integrations (such as Zendesk or Jira) or channels (Telegram, Twilio), a summary of the conversation and the visitor's contact details are also sent to the services you connected, and nowhere else.

Which AI provider sees it

Whichever one you've selected in your dashboard. Techvea doesn't run its own AI models — every request is forwarded to your chosen provider using your own API key, so their privacy policy and data handling terms apply to that request as much as ours do.

What's retained, and for how long

• Support Bot: conversation history is stored per visitor session so context carries across messages, until you delete it or, if you turn on automatic deletion (30, 90, 180 or 365 days), until that period ends. Contact details visitors leave, tickets and ticket notes are kept until you delete them.
• Public help center: if you switch it on, the typed articles, taught answers and imported website pages from your knowledge base become public. Uploaded files are never shown.
• Voice: the microphone and read-aloud features run in the visitor's own browser using its built-in speech tools. Depending on the browser, the browser maker may process the audio under its own privacy policy; Techvea receives only the resulting text.
• Public demo pages (/demo/*): nothing submitted is stored. Demo requests aren't tied to any account and aren't saved after the response returns.

What we don't do

• We don't sell or share visitor data with third parties.
• We don't use visitor submissions to train any model — the AI provider you've configured may have its own data-use policy for API traffic, which is worth reading if that matters to you.
• We don't put any tracking in the chat widget that runs on your site, and we don't add advertising trackers anywhere.
• Our own website (techvea.com, not your site or your widget) uses Google Analytics to count visits, which sets cookies in your browser, but only if you press "Accept analytics" in the cookie notice. If you decline, or never choose, the script is not loaded and no analytics cookies are set. You can change your choice any time with "Cookie settings" in the footer. It is always off on the hosted chat and help center pages, which belong to your bot. To exclude your own visits, open any page of our site with ?ignore-me at the end of the address. The sign-up form uses Cloudflare Turnstile to stop automated sign-ups. The login form asks for the same check only after repeated wrong passwords.

Your AI key

Your AI provider API key is encrypted at rest (AES-256-GCM) before it's stored, and decrypted only in server memory at the moment it's needed to make a request. It's never sent to the browser or shown again after you save it — see the security page for details.

Your data: download it, delete it

The workspace owner can download everything in the workspace as one file, and delete the account with all its bots, conversations, tickets and contacts, from Dashboard, Account, Your data. Payment records that the law requires us to keep stay, with no link left to a person. Old chats can also be deleted automatically on a schedule you choose for each bot, and files visitors send in a chat are removed after 30 days.

Who else handles data (subprocessors)

We use these services to run Techvea. Some are only involved if you turn the matching feature on.

• Hostinger: hosts the website, the app and the database.
• Polar: takes payments and manages subscriptions. We never see card numbers.
• Your AI provider (Google Gemini, OpenAI or Anthropic): answers the visitor's question, using the key you gave us. Visitor messages and the knowledge passages needed for the answer are sent to it.
• Our own email service: sends sign-up, billing and alert emails.
• Cloudflare Turnstile and Google Analytics: protect the sign-up form and measure visits to this website.
• Only if you connect them: Twilio, Telegram, Slack, Notion, Google Drive and your ticket tools. Each receives only what the feature needs, under your own account with them.

If your company needs a signed data processing agreement, write to us through the contact page and we will provide one.

Questions

Write to us through the contact page.