Careful with your website and your visitors
An assistant on your website is a guest in front of your customers. Here is how we keep it safe, private and well-behaved — in plain words.
Encrypted connections, always
Every page, script and answer travels over HTTPS, and browsers are told to always use a secure connection with us.
Protected infrastructure
Our services sit behind a protective network layer that filters attacks before they reach us, and our servers only accept traffic that comes through it.
Watched script files
The files your website loads are monitored for unexpected changes, so we would know quickly if anything was altered.
Only on your websites
Your assistant only answers on the websites registered to your account. Copied to another site, it does not appear.
Bots kept out
A quiet human check runs before AI answers. An automatic shield slows or pauses abusive visitors and can put a targeted website into a limited mode for a while.
Limits that protect your account
Per-visitor and per-website limits stop anyone from running up AI usage. Simple greetings and contact requests use no AI at all.
What we read from your website
Public pages only, after you confirm the website is yours. We keep the text of each page by heading, titles, the details your pages publish, and links to images (not the images). We follow your robots.txt, skip noindex pages, and skip any path or part of a page you exclude.
We never learn account, login, cart, checkout or password pages. The full list.
What the widget sees on a visitor’s page
When a visitor opens the chat, it reads what describes the page they are on: the address, title, headings, published details and the text near where they are reading. It never reads form fields or anything typed into your page, cookies, browser storage, cookie banners, or anything marked data-rtai-ignore. Email addresses and phone numbers other than your own published ones are left out.
On confirmed websites, the script also tells us which public pages were viewed and whether they look changed, so we can re-read them sooner. If a visitor is signed in to your website, only the page address and title are noted — never the content.
Visitors signed in to your website
Your website’s login and the chat are kept separate. We never link a visitor’s identity on your website to the chat, and page reports never carry a visitor’s identity.
Visitor data we keep
- Conversations are stored so you can review them in your dashboard.
- Leads — only the details a visitor chooses to send in the contact form, after seeing what will be shared.
- Network information used for abuse protection is kept in a scrambled (hashed) form, not as raw IP addresses.
Your answers stay grounded
Answers come from your own website and the answers you write. The assistant refuses attempts to make it ignore its instructions, never discriminates, and for real estate follows fair-housing rules.
Switching off and deleting
Remove the script line and the assistant disappears from your website. If you close your account, what the assistant learned from your website is deleted.
Report a security issue
Found something? Email [email protected] with “Security” in the subject. Please give us a chance to fix it before sharing details publicly.
More detail is in our Privacy Policy.
Put an assistant on the website you already have
One line of code. CA$10/month launch price. Office AI included. No card needed. Then CA$10/month launch price.