Browse the docs
Privacy and security
Visitor data requests
Answer a visitor who asks what you hold about them or wants it deleted: find them by email or visitor id, download everything as JSON, or delete it.
Last updated
On this page
Visitors who chatted with your agents can ask you, as the business that runs the website, what you hold about them or to delete it. Privacy laws such as the GDPR (Articles 15 and 17) and the California Consumer Privacy Act give them that right, and set deadlines for answering. ASDK processes the data for you, so you answer from the dashboard: Settings → Data → Visitor data requests. Owners and admins of the workspace can use it.
Answering a request
Find the visitor
Enter the email address the visitor gave you, or their visitor id (it starts with vis_; the inbox shows it on each conversation), and select Find. An email address finds every visitor it is known for on all sites of the workspace (the whole address only: a search for dana@example.com does not find jordana@example.com):
- a visitor whose identity your site passed to the widget with that address;
- the leads left with it;
- identify calls that named it;
- conversations in which the visitor typed it.
The result counts the conversations, messages, leads, booked meetings, voice calls and analytics events found.
Download a copy
Download JSON saves everything in one file: the visitor records with their identity, every conversation with its messages and ratings, leads with their qualification and the answers of a form they sent, booked meetings, voice calls (their transcripts are conversations) and analytics events (up to 10,000; the file says how many there are in all). Send it to the visitor if they asked for a copy.
Delete it
Delete everything removes all of it in one step, across every site of the workspace. Leads also leave the delivery log, the meetings booked through your booking tool go with them, and so do unanswered questions that quote the visitor's email address and the webhook log's copies of their leads and conversations. Data that was already sent to your CRM, webhook or email stays there: delete it in those tools too.
The workspace's audit log records each download and deletion with the person who made it, and names the visitor by a short code made from the email address, never the address itself.