What is SmartChatBot?

SmartChatBot is an AI chatbot service that website operators embed on their website. The chatbot automatically answers visitor queries based on the knowledge base provided by the website operator. The website operator is the data controller under GDPR. SmartChatBot (UndiWeb) acts as a data processor.

What data is processed?

Chat messages: Free text inputs and bot responses (90 days, then anonymized)
Lead data: Name, email, phone — only when voluntarily provided (until deletion by customer)
Technical data: IP address (hashed), page URL, timestamp (90 days)

Note: IP addresses are only stored as a hash. No cookies are set by the chatbot.

Where is the data stored?

All data is stored on servers in the EU (Frankfurt am Main, Germany). To generate AI responses, messages are transmitted to AI services certified under the EU-US Data Privacy Framework. Messages are not permanently stored there and are not used to train AI models.

Security measures

Encrypted data transmission (HTTPS/TLS), Role-based access control, Tenant isolation at the database level, Daily backups (30 days retention), IP anonymization through hashing, Protection against spam and abuse.

Customer rights

Access to all stored data
Correction and deletion
Data export in machine-readable format
Data Processing Agreement (DPA) on request
Right to lodge a complaint with a supervisory authority

Swiss customers (nDSG)

For customers based in Switzerland: the EU is recognized as a third country with an adequate level of data protection. Additional nDSG-compliant contractual clauses are available on request.

Contact: info@undiweb.net

Last updated: May 2026