Built for European privacy. By design.
EU privacy rules shaped how Ovebot was built; they were the starting point, not a compliance pass at the end. Visitor data stays in Europe, your team controls every byte, and customers can talk to you without creating an account.
Visitors delete their own conversation
No email to your team and no form to fill in. The menu in the chat header lets every visitor save a copy of the conversation or delete it for good, at any time.
- Open the ⋮ menu in the chat header.
- Choose Delete conversation.
- The conversation is deleted for good.
Download conversation saves a copy of the chat for the visitor.
Every chat says what it is, before the first message
The widget tells visitors they are talking to an AI assistant that can make mistakes, and links to the privacy policy that covers the conversation.
What GDPR asks for, already in the product
EU data storage
Where does the data live? In European data centres: every conversation, every knowledge base article, every customer request. Inference is the exception, it goes through global LLM providers, which is why personal data gets filtered out of each prompt before it leaves our infrastructure (see below).
OTP instead of accounts
Visitors don't need a password or an account to chat or place a request. Sensitive actions (cancel order, change address) are confirmed by a one-time email code. No impersonation, no forgotten passwords.
PII kept out of LLM logs
Personal identifiers (emails, phone numbers, addresses) are filtered before the conversation hits the language model. The LLM sees the question; your CRM sees the customer.
One-click session anonymize
A visitor asks for their data to be removed? Anonymize the entire session with a single click from your dashboard. The conversation history stays for your analytics; identity is gone.
Full data export & delete
Request a workspace-wide data export from the dashboard at any time and you receive a 72-hour download link by email. Delete the workspace and every byte tied to it disappears.
Cookie-light by default
The widget runs on a single first-party session token. No third-party trackers, no advertising cookies. Compliant with strict EU cookie banner rules out of the box.
Visitors control their own data
Every chat opens with an AI disclosure and a privacy notice. From the widget menu, visitors can download their conversation or permanently delete it at any time. GDPR rights, exercised self-service, without involving you.
Auto-generated privacy policy
Every customer gets a ready-made privacy policy page naming their company as data controller and Ovebot as processor, or can add their own policy instead. The DPA and sub-processor list are public, ready to show any auditor.
The documents an auditor asks for
The data processing agreement, the sub-processor list and the privacy policy are public. Read them before you sign up.
Your agent, live on your store in 5 minutes.
A free account for 14 days, no card. Your agent is live on your store in 5 minutes; if you want a demo first, it takes about 60 seconds.
The 14-day trial plan at signup costs nothing and needs no card; test first, pay later.
