DigitGPTPrivacy Policy
Legal & Data ProtectionDigitGPT.cloud processes account, workspace and conversational session data strictly to deliver and secure the service. Customer workspace documents and knowledge indexes remain logically isolated per organization.
Data processed by DigitGPT.cloud
| Category | Purpose & scope |
|---|---|
| Account & workspace identity | Firebase Authentication email, user UID, organization membership and role assignment. |
| Company Knowledge sources | Documents and selected web page excerpts uploaded by authorized workspace editors to ground assistant responses. |
| Session & usage telemetry | Session timestamps, duration counters and first-party HttpOnly cookie hashes for fair-use rate limiting and quota enforcement. |
| Billing metadata | Stripe customer and subscription identifiers for plan entitlement verification (payment card numbers are handled directly by Stripe). |
Workspace isolation and visitor privacy
- Multi-tenant isolation ensures that knowledge groups uploaded by one organization cannot be queried by another organization.
- Public demo conversations on the landing page are ephemeral, capped at 60 seconds, and visitors are instructed not to share confidential or sensitive personal data.
- Workspace owners and administrators can delete uploaded knowledge documents, custom avatars and assistant configurations from their studio at any time.