Browse the docs
Privacy and security
Data retention
How long ASDK keeps your content, conversations, leads, analytics events, logs and backups, how to change it per site, and what the nightly cleanup deletes.
Last updated
On this page
ASDK keeps data only as long as it's needed to run the service, meet legal duties and resolve disputes. This page lists the periods from our privacy policy, section 7, explains them in practical terms, and shows how to change the periods for your visitors' data.
Retention at a glance
| Data | How long |
|---|---|
| Visitors' conversations and leads | 12 months by default; you can change it per site |
| Analytics events (page views, clicks, widget loads) | 13 months |
| Your content: pages, files, snippets, Q&A pairs and the knowledge built from them | While you keep it connected |
| Account data | While your account is open |
| Server and security logs, including IP addresses in the audit log | Up to 90 days |
| Error reports | Up to 90 days |
| Support requests | Up to 24 months after they're resolved |
| Billing and tax records | As long as tax and accounting laws require |
| Free tool results and demo knowledge bases | Up to 30 days, unless you create an account and keep the site |
| Encrypted backups | Expire on a rolling basis within 30 days |
Conversations and leads
Because your company controls your visitors' data, it decides how long it's kept. Every site keeps what its visitors leave for a period you choose, and a cleanup runs every night at 00:00 UTC and deletes what is older than that period. You set it per site in the dashboard under Settings → Data → Retention; owners and admins can change it, and every member can see it.
| Data | You can choose | Default |
|---|---|---|
| Conversations | 30, 90 or 180 days, 12 or 24 months | 12 months |
| Leads | 30, 90 or 180 days, 12 or 24 months, or until someone deletes them | 12 months |
| Analytics events | Fixed | 13 months |
The 12-month default is the one our privacy policy and data processing addendum promise. A shorter period is a good choice when you only use conversations for support and never look back at older ones. If you choose to keep leads until someone deletes them, make sure your own privacy notice says so.
Exports leave our retention behind: a CSV export of leads is yours to keep or delete. See Leads and CSV export.
What the cleanup deletes
- Conversations whose last message is older than the period, with their messages, the visitor's page and device details, the ratings visitors gave answers and the Sales agent's notes on them.
- Unanswered questions and searches that were last asked before the period started: they are visitors' own words.
- Visitor records that have no conversation left and were not seen during the period, with the identity your site passed to the widget.
- Leads older than their period, with their contact details, delivery log and the meetings booked through your booking tool. A lead you keep loses its link to a conversation that was deleted.
- Analytics events older than 13 months.
- IP addresses in the workspace's audit log older than 90 days. The audit entries themselves stay; only the address is cleared.
The page under Retention shows when the cleanup last ran for each site and what it removed. A change applies from the next cleanup; deleted data cannot be brought back, so export leads first if you need them.
Your content
Content stays in your knowledge as long as its source is connected:
- Delete a source, such as a file or a website section, and its pages and passages are removed from your knowledge right away.
- Pages that disappear from your website are removed at the next complete sync of their source.
- Delete a site, and its content, Q&A pairs and conversations are deleted with it.
Removed content is deleted from our live systems within 30 days at the latest. Copies in encrypted backups disappear when those backups expire, within a further 30 days.
When you delete a workspace or close your account
When a workspace is deleted, or you close your account, we delete your content, conversations and account data from our live systems within 30 days, and backup copies expire within a further 30 days. See Deleting a workspace or your account.
Moving to a smaller plan is not closing your account: content isn't deleted because of a downgrade. See When your trial ends.
Data in visitors' browsers
The visitor ID the widget keeps in a browser's local storage has no automatic expiry: it stays until the visitor clears their browser's site data. It's a random value, and the conversation it points to is deleted on our side when its retention period ends. See Data we store.
AI model providers
When an agent writes an answer, the question and the relevant passages of your content are sent to an AI model provider. Providers may keep requests for a limited time to detect misuse; OpenAI, for example, states that it keeps abuse-monitoring logs for up to 30 days by default, as our subprocessors page notes. They don't use the data to train their models. See No training on your data.
Longer retention for legal reasons
We may keep data longer when the law requires it, or while it's needed to establish, exercise or defend a legal claim. In that case, only the data that's needed is kept, and only for as long as needed.
What to tell your visitors
In your privacy notice, describe how long chat conversations and contact details are kept. If you use the default, "conversations with our website assistant are kept for 12 months" is accurate. The cookie policy has text about the widget's visitor ID that you can adapt.
Related: Data we store, Visitor data requests, Deleting a workspace or your account, Subprocessors.