An AI Chatbot that handles data in a GDPR-compliant way
Your visitors ask questions in chat, and sometimes share a name, email address, or phone number. LivePly processes these in the EU, in an isolated and encrypted way, you set the retention period, and you get a ready-made document for informing your visitors.
What does LivePly bring to data protection?
Data protection is built into the system architecture, the Chatbot itself, and the admin panel settings - not bolted on afterwards.
Hosting and AI within the European Union
LivePly's servers run in a German data center, and AI responses are generated by a Sweden-based, EU AI service. Conversations never leave the European Union during processing.
The AI provider may retain conversations for abuse-prevention purposes for up to 30 days, also within the European Economic Area. If any sub-processor handles data in a third country, LivePly applies GDPR safeguards (an adequacy decision, Standard Contractual Clauses - SCCs).
Isolation and encryption
LivePly is a multi-tenant platform, but customer data never mixes: every business gets its own, isolated database schema for its knowledge base, conversations, and leads. Data always travels over an encrypted channel.
Passwords and any access keys and tokens you provide are stored encrypted by the system - it never keeps them in their original form anywhere. Access follows the principle of least privilege.
Informing visitors, verifiably
Under the GDPR, visitors must know in advance what happens to their data. LivePly generates a privacy notice for every Chatbot, and visitors also get a separate end-user privacy notice describing what data LivePly processes in its own name. Informing your visitors correctly is your responsibility, but you receive the ready-made document for it.
The system logs which privacy notice version a visitor could see, and when. This makes it possible to prove afterwards that the disclosure took place. None of these logs store an IP address, device identifier, or nickname.
Recognizing contact details, marking leads
The Chatbot recognizes a name, phone number, or email address given in the conversation and lists it clearly in the admin panel, even if the visitor typed it as free text. A conversation is marked as a "lead" only if an email address or phone number is present - a name alone isn't enough. The system doesn't score or rate leads, and next to each name it shows whether the visitor provided it themselves or whether it was inferred from the conversation.
You can set the retention period for lead data per Chatbot: 12 months by default, up to 24 months, counted from the last meaningful contact. After that it is deleted automatically. Important: marking someone as a lead is not marketing consent - you may only send marketing messages with a separate, prior opt-in.
You decide how long conversations are kept
You set the conversation retention period between 1 and 3650 days. If you don't configure anything, they are automatically deleted after 180 days. In healthcare mode, they are kept for at most 30 days. Attached files are deleted together with the conversation.
Logs of actions the Chatbot initiates (e.g. booking an appointment) are kept for 365 days for troubleshooting and traceability - but on a data subject's deletion request, these are deleted immediately too, without waiting out that period.
Who is the controller, and who is the processor?
Your visitors use the Chatbot on your own website, so with respect to conversations, attachments, and leads, you are the data controller: you determine the purpose and the legal basis. LivePly acts as a data processor, following your documented instructions. The details are set out in the Data Processing Agreement (DPA).
The service is provided by SolvePly Kft. It keeps the logs it needs for its own operation - legal-document acceptances, action logs - as an independent controller in its own right. You can reach us for data-protection questions and data-subject requests at office@solveply.com, and we fulfil requests within one month.
What's worth configuring for yourself?
Hosting runs in a German data center, and AI responses are generated by a Sweden-based, EU AI service - conversations never leave the European Union during processing.
No. Every customer's data is stored in its own, isolated database schema, which no other customer can access.
You set the retention period between 1 and 3650 days. If you don't configure anything, they are automatically deleted after 180 days, and at most 30 days in healthcare mode.
Only when the visitor provides an email address or phone number in the conversation - a name alone isn't enough. The system doesn't score or rate leads.
Only if you've also obtained a separate, prior opt-in for it. Marking someone as a lead is based on legitimate interest alone, not marketing consent.
You can set it per Chatbot: 12 months by default, up to 24 months, counted from the last meaningful contact - after that it's deleted automatically.
You are, since your visitors use the Chatbot on your own website: you determine the purpose and the legal basis. LivePly acts as a data processor, following your documented instructions - the details are set out in the Data Processing Agreement (DPA).
We fulfil a data subject's deletion request immediately - in that case there's no need to wait out the usual retention period, including for logs of actions the Chatbot initiated.
Yes - turn on healthcare mode, which limits conversation retention to at most 30 days instead of the usual, longer period.
No - card details are handled by our payment provider, Stripe. LivePly never has access to them and never stores them.