Short answer: It depends on the vendor, and there are specific questions that separate serious ones from the rest — is your data used to train AI models, who can read transcripts, how long are they kept, and what independent certifications exist. Clerkzo does not use your data to train AI models, and is SOC 2 Type II examined, GDPR compliant and HIPAA assessed. What matters is that you know how to verify claims like that rather than take them on faith.
What data a chat widget actually handles
Three categories, with different risk profiles.
Your business content. Pages crawled from your site and files you upload. Usually already public, and the low-risk category — though uploaded internal documents deserve more care than a crawled homepage.
Conversation content. What visitors type. This is where personal data appears, often unprompted: names, phone numbers, email addresses, and sometimes far more than you asked for. People volunteer things to chat interfaces.
Operational metadata. Timestamps, page context, session identifiers. Individually dull, collectively identifying.
Most privacy risk sits in the second category, and most of it arrives without you asking for it.
The questions that actually separate vendors
Ask these directly and insist on specific answers.
Is my data used to train AI models? This is the question people care about most and the one with the most weasel-worded answers. The distinction to press on: a model provider processing a request is not the same as training on your content. Clerkzo does not use your data to train AI models. Get the equivalent statement in writing from anyone you evaluate.
Who can read my conversations? Vendor staff access should be limited, logged and justified by support need. "Anyone in engineering can query the database" is a real answer some vendors would have to give if pressed.
How long is data retained, and can I delete it? You need a stated retention period and a working deletion path — for a single conversation and for your whole account.
Where is data processed and stored? Relevant for GDPR and for anyone with regional obligations.
What independent certification do you hold? A SOC 2 Type II report means an auditor tested controls over a period, not just that a policy document exists. Self-certified security is a marketing claim.
What happens on offboarding? What is deleted, when, and how you get an export first.
Compliance labels and what they mean
GDPR is a legal obligation, not a certification. A vendor claiming compliance should be able to supply a data processing agreement, name their sub-processors, and describe how they handle deletion and access requests. Under GDPR you are typically the controller and the vendor is a processor, which means the accountability for what gets collected is yours.
SOC 2 Type II is an audit of security controls operating over time, conducted by an independent firm. Type I is a point-in-time snapshot and is meaningfully weaker.
HIPAA applies to protected health information in the US and requires a business associate agreement. If you are a healthcare provider, that agreement is the point — the compliance badge alone is not.
The most effective control is collecting less
Every field you ask for is data you must protect. A widget scoped to answer questions and capture a name plus one contact method carries a fraction of the risk of one collecting dates of birth and medical details in free text.
Two configuration habits do most of the work. Do not ask for sensitive information in chat — route anything sensitive to a secure form or a phone call. And scope the widget tightly so it does not invite disclosure it does not need; the guardrails that keep it on your business also keep it from wandering into territory where visitors overshare.
Visitors will still volunteer things. That is a retention and access question, not a collection one, which is why the retention answer matters.
The security failure modes worth knowing
Injection into the widget. A visitor typing instructions to override its rules is trying to extract or manipulate. The structural defence is that the widget only has access to your published content and the current conversation, so there is little to extract. Read up on prompt injection if you are evaluating this seriously.
Leakage through knowledge files. Uploading an internal document that contains customer names or staff details makes that content retrievable by anyone who asks the right question. Audit uploads as text before they go in.
The host page. A widget injecting scripts into your site is a supply-chain risk to your own visitors. Clerkzo runs inside a Shadow DOM, isolating the widget from your page and your page from the widget.
Downstream systems. Transcripts flowing into a CRM or a webhook inherit whatever protection that system has. The chain is only as strong as its weakest link, and it is usually not the chatbot.
What to tell your visitors
Be plain about it. Say that the chat is powered by AI, that conversations are recorded, and link to your privacy policy from the widget. Most jurisdictions expect some form of disclosure and all customers appreciate it.
Hiding the fact that a visitor is talking to software is a bad trade. It buys nothing and costs trust the moment it becomes obvious — which it usually does. The setup and what gets stored is documented on how it works, and pricing is flat, which means security posture is not gated behind an enterprise tier.
Frequently asked questions
Will my business data be used to train AI models?
Not with Clerkzo. Ask any vendor for that statement explicitly, and distinguish between processing a request and training on your content.
Do I need to tell visitors they are chatting with AI?
Disclose it. It is expected in many jurisdictions, it is straightforward, and concealment damages trust when discovered.
Is chat safe for health-related enquiries?
Only with a business associate agreement in place and the widget scoped so it does not solicit clinical detail. Route anything specific to a secure channel.
Who is responsible if a visitor types something sensitive?
Under GDPR you are usually the controller, so accountability sits with you. Configure the widget to collect the minimum and check the vendor's retention and deletion terms.