Privacy
What we store, who else sees it, and how to get rid of it.
Last updated 8 October 2026
TailGPT reads the pages of a website you own and answers questions about them. That means we hold two quite different things: your account, and your website's content. This page says what happens to both.
What we store
Your account
Your name, your email address, and your password — the password only as a bcrypt hash, which cannot be turned back into the password you chose. We record when you last signed in.
Your website's content
The text of the pages you choose, and their addresses. We send that text to OpenAI to be turned into a searchable index, which is what lets your chatbot quote your own pages back to a visitor.
Your chatbots
Their names, roles, colours, greetings, any instructions you write, and a logo if you upload one.
Questions your visitors ask
The question, and the answer we gave. Each one is stored with whether your pages covered it, which of your pages the answer came from, the page of your site it was asked on, and a one-way hash in place of the visitor's IP address - never the address itself. Kept while the account is open; deleted when the account is closed. A business can delete any single conversation at any time. Each visitor's conversation with a chatbot is kept the same way, so it is still there when they come back. A question, with the last few turns of its conversation, is sent to OpenAI to be answered, and diagnostic details may appear briefly in our server logs when something fails.
Details visitors give an agent
When someone chats with a TailGPT agent on one of our customers' websites, the agent may ask for details our customer has chosen - such as a name, phone number or email address - and what the visitor is looking for. These are stored for that customer, shown in their dashboard and emailed to them. Our customer decides what to ask and what to do with it; we process it on their behalf.
Conversation summaries
We use an AI model to write a short summary of each finished conversation, so our customer can see what visitors asked. The summary is stored with the conversation.
Google sign-in and Google Sheets
If you sign in with Google
We receive your name, email address and Google account ID, and use them only to create and sign in to your TailGPT account.
If you connect a Google Sheet
TailGPT creates one spreadsheet in your Google Drive and adds a row to it for each new lead. It cannot see or open any other file in your Drive, and you can disconnect it at any time.
TailGPT's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
What we do not do
- We do not sell anything about you or your visitors.
- We do not use your website's content to train anybody's model.
- We do not read your visitors' questions for advertising, or join them up with anything else about them.
- We do not put tracking or advertising cookies on your site.
Who else is involved
Running this needs other companies, and they see parts of the above:
- OpenAI — your pages and each question, to produce an answer.
- MongoDB Atlas — where the database lives.
- An email provider — to send confirmation codes and account emails.
- Razorpay — takes your payments. Your card, UPI or bank details go to Razorpay, not to us; we pass it your name and email address for the checkout.
- Google — only if you sign in with Google, to confirm your name and email address, or connect a Google Sheet, to hold the leads it is sent (details).
How long we keep it
Your account and your website's content stay until you remove them. Deleting a chatbot removes it and its logo. Closing your account signs you out everywhere, stops your chatbots answering and cancels your plan, so you are not charged again. We do not delete a closed account on our own: the record stays so it can be reopened, and so one email address cannot get a second free preview. Ask us and we will erase it.
Your visitors' questions, answers and conversations: kept while the account is open; deleted when the account is closed. A business can delete any single conversation at any time.
Your visitors
The bubble on your website is yours, not ours. We never ask your visitors for a name, an email address or a login, and we do not identify them. The bubble keeps a random id in the visitor's browser so a returning visitor sees their own conversation; it is not linked to anything else about them. If your own privacy policy needs to mention us, the honest summary is: questions typed into the chat bubble are sent to TailGPT and to OpenAI to be answered from that website's own pages; TailGPT keeps each question, answer and conversation, so the visitor can pick it up again. Kept while the account is open; deleted when the account is closed. A business can delete any single conversation at any time.
Asking us for a copy, or for deletion
Write to [email protected] from the address on the account. We will send you what we hold, or erase it, within 30 days.