Facts you can verify.
Privacy and security should be more than a green checkmark. This page documents the key providers, data flows and product decisions as concretely as possible.
EU-based standard setup.
- Application & hosting
- Smartwebchat runs on infrastructure from Hetzner Online GmbH in the EU.
- Database & vector search
- PostgreSQL and pgvector run within the intended hosting infrastructure.
- Knowledge-base files
- Object storage is operated in the intended Hetzner region in the EU.
- Default AI
- Mistral Small is the default model. Processing takes place through Mistral AI in the EU.
- Embeddings
- Embeddings use Mistral.
When processing can differ.
If a customer deliberately enables optional premium models from OpenAI, third-country processing can take place. Technical restrictions apply to certain sensitive professional contexts according to current product logic.
Customer-configured external destinations such as Slack webhooks or other webhook endpoints can also create their own data flows.
Retention and deletion.
Conversation data is deleted according to the current retention policy. Business data retention can be configured within the supported limits.
Backups.
Database backups are created regularly, encrypted and tested.
Legal documents.
DPA, privacy policy and other legal documents are provided separately. Legal claims only go live once they have been reviewed and approved.
Our principle.
We deliberately avoid blanket claims such as “100% GDPR compliant” or “all data always remains in the EU” when optional product configurations require a more precise answer.
Does data always stay in the EU?
The standard setup is designed around EU providers and infrastructure. Deliberately selected premium models or external destinations can use other data regions.
Which AI model is the default?
Mistral Small.
Where is Smartwebchat hosted?
On Hetzner infrastructure in the EU.