What is SmartChatBot?

SmartChatBot is an AI chatbot service that website operators embed on their website. The chatbot automatically answers visitor queries based on the knowledge base provided by the website operator. The website operator is the data controller under GDPR. SmartChatBot (UndiWeb) acts as a data processor.

What data is processed?

Chat messages: Free text inputs and bot responses (90 days, then anonymized)
Lead data: Name, email, phone — only when voluntarily provided (until deletion by customer)
Technical data: IP address (hashed), page URL, timestamp (90 days)

Note: IP addresses are only stored as a hash. No cookies are set by the chatbot.

Where is the data stored?

All data is stored on servers in the EU (Germany). To generate AI responses, messages are transmitted to AI services certified under the EU-US Data Privacy Framework. Messages are not permanently stored there.

Security measures

HTTPS/TLS encryption, AES-256 for API keys, Row-Level Security (tenant separation), Role-based access control, IP hashing, Daily backups (30 days), Anti-spam/Rate-Limiting, CORS protection.

Customer rights

Access to all data via admin panel
Export as CSV
Deletion of individual or all data
Complete data copy upon contract termination

Contact: info@undiweb.net / +381 61 13 34 665

Last updated: April 2026

Privacy Information

What is SmartChatBot?

What data is processed?

Where is the data stored?

Security measures

Customer rights