Skip to content
Browse the docs

Privacy and security

Data retention

How long ASDK keeps your content, conversations, leads, analytics events, logs and backups, how to change it per site, and what the nightly cleanup deletes.

Last updated

On this page

ASDK keeps data only as long as it's needed to run the service, meet legal duties and resolve disputes. This page lists the periods from our privacy policy, section 7, explains them in practical terms, and shows how to change the periods for your visitors' data.

Retention at a glance

DataHow long
Visitors' conversations and leads12 months by default; you can change it per site
Analytics events (page views, clicks, widget loads)13 months
Your content: pages, files, snippets, Q&A pairs and the knowledge built from themWhile you keep it connected
Account dataWhile your account is open
Server and security logs, including IP addresses in the audit logUp to 90 days
Error reportsUp to 90 days
Support requestsUp to 24 months after they're resolved
Billing and tax recordsAs long as tax and accounting laws require
Free tool results and demo knowledge basesUp to 30 days, unless you create an account and keep the site
Encrypted backupsExpire on a rolling basis within 30 days

Conversations and leads

Because your company controls your visitors' data, it decides how long it's kept. Every site keeps what its visitors leave for a period you choose, and a cleanup runs every night at 00:00 UTC and deletes what is older than that period. You set it per site in the dashboard under Settings → Data → Retention; owners and admins can change it, and every member can see it.

DataYou can chooseDefault
Conversations30, 90 or 180 days, 12 or 24 months12 months
Leads30, 90 or 180 days, 12 or 24 months, or until someone deletes them12 months
Analytics eventsFixed13 months

The 12-month default is the one our privacy policy and data processing addendum promise. A shorter period is a good choice when you only use conversations for support and never look back at older ones. If you choose to keep leads until someone deletes them, make sure your own privacy notice says so.

Exports leave our retention behind: a CSV export of leads is yours to keep or delete. See Leads and CSV export.

What the cleanup deletes

  • Conversations whose last message is older than the period, with their messages, the visitor's page and device details, the ratings visitors gave answers and the Sales agent's notes on them.
  • Unanswered questions and searches that were last asked before the period started: they are visitors' own words.
  • Visitor records that have no conversation left and were not seen during the period, with the identity your site passed to the widget.
  • Leads older than their period, with their contact details, delivery log and the meetings booked through your booking tool. A lead you keep loses its link to a conversation that was deleted.
  • Analytics events older than 13 months.
  • IP addresses in the workspace's audit log older than 90 days. The audit entries themselves stay; only the address is cleared.

The page under Retention shows when the cleanup last ran for each site and what it removed. A change applies from the next cleanup; deleted data cannot be brought back, so export leads first if you need them.

Your content

Content stays in your knowledge as long as its source is connected:

  • Delete a source, such as a file or a website section, and its pages and passages are removed from your knowledge right away.
  • Pages that disappear from your website are removed at the next complete sync of their source.
  • Delete a site, and its content, Q&A pairs and conversations are deleted with it.

Removed content is deleted from our live systems within 30 days at the latest. Copies in encrypted backups disappear when those backups expire, within a further 30 days.

When you delete a workspace or close your account

When a workspace is deleted, or you close your account, we delete your content, conversations and account data from our live systems within 30 days, and backup copies expire within a further 30 days. See Deleting a workspace or your account.

Moving to a smaller plan is not closing your account: content isn't deleted because of a downgrade. See When your trial ends.

Data in visitors' browsers

The visitor ID the widget keeps in a browser's local storage has no automatic expiry: it stays until the visitor clears their browser's site data. It's a random value, and the conversation it points to is deleted on our side when its retention period ends. See Data we store.

AI model providers

When an agent writes an answer, the question and the relevant passages of your content are sent to an AI model provider. Providers may keep requests for a limited time to detect misuse; OpenAI, for example, states that it keeps abuse-monitoring logs for up to 30 days by default, as our subprocessors page notes. They don't use the data to train their models. See No training on your data.

We may keep data longer when the law requires it, or while it's needed to establish, exercise or defend a legal claim. In that case, only the data that's needed is kept, and only for as long as needed.

What to tell your visitors

In your privacy notice, describe how long chat conversations and contact details are kept. If you use the default, "conversations with our website assistant are kept for 12 months" is accurate. The cookie policy has text about the widget's visitor ID that you can adapt.

Related: Data we store, Visitor data requests, Deleting a workspace or your account, Subprocessors.