TailGPT

Privacy

What we store, who else sees it, and how to get rid of it.

Last updated 13 September 2026

TailGPT reads the pages of a website you own and answers questions about them. That means we hold two quite different things: your account, and your website's content. This page says what happens to both.

What we store

Your account

Your name, your email address, and your password — the password only as a bcrypt hash, which cannot be turned back into the password you chose. We record when you last signed in.

Your website's content

The text of the pages you choose, and their addresses. We send that text to OpenAI to be turned into a searchable index, which is what lets your chatbot quote your own pages back to a visitor.

Your chatbots

Their names, roles, colours, greetings, any instructions you write, and a logo if you upload one.

Questions your visitors ask

The question, and the answer we gave. Each one is stored with whether your pages covered it, which of your pages the answer came from, the page of your site it was asked on, and a one-way hash in place of the visitor's IP address - never the address itself. These records are deleted automatically after 90 days. Each visitor's conversation with a chatbot is also kept, so it is still there when they come back; conversations do not expire on their own yet. A question, with the last few turns of its conversation, is sent to OpenAI to be answered, and diagnostic details may appear briefly in our server logs when something fails.

What we do not do

  • We do not sell anything about you or your visitors.
  • We do not use your website's content to train anybody's model.
  • We do not read your visitors' questions for advertising, or join them up with anything else about them.
  • We do not put tracking or advertising cookies on your site.

Who else is involved

Running this needs other companies, and they see parts of the above:

  • OpenAI — your pages and each question, to produce an answer.
  • MongoDB Atlas — where the database lives.
  • An email provider — to send confirmation codes and account emails.
  • Razorpay — takes your payments. Your card, UPI or bank details go to Razorpay, not to us; we pass it your name and email address for the checkout.
  • Google — only if you sign in with Google, to confirm your name and email address.

Cookies and analytics

One cookie is ours and always set: the one that keeps you signed in. It cannot be read by JavaScript and is not shared with anybody.

If you agree, we also use three analytics services, and they set cookies of their own. Nothing loads and no cookie of theirs is set until you accept.

  • Mixpanel — which parts of the product get used, and where people get stuck.
  • Google Analytics — how people found this site.
  • Microsoft Clarity — anonymous recordings of how pages are used, with text hidden. It never runs on our admin pages.

We also record what happens in your account on our own servers — plans bought, limits reached, questions answered. That is how the service is run and billed, it sets no cookie, and it is covered by this notice rather than by the choice below.

The chat bubble on a customer's website sets no cookie at all, and none of these three services runs there.

How long we keep it

Your account and your website's content stay until you remove them. Deleting a chatbot removes it and its logo. Closing your account signs you out everywhere, stops your chatbots answering and cancels your plan, so you are not charged again. We do not delete a closed account on our own: the record stays so it can be reopened, and so one email address cannot start a second free trial. Ask us and we will erase it.

Your visitors' questions and answers are deleted automatically after 90 days. Their conversations do not expire on their own yet; write to us and we will erase them.

Your visitors

The bubble on your website is yours, not ours. We never ask your visitors for a name, an email address or a login, and we do not identify them. The bubble keeps a random id in the visitor's browser so a returning visitor sees their own conversation; it is not linked to anything else about them. If your own privacy policy needs to mention us, the honest summary is: questions typed into the chat bubble are sent to TailGPT and to OpenAI to be answered from that website's own pages; TailGPT keeps each question and answer for 90 days, and the conversation so the visitor can pick it up again.

Asking us for a copy, or for deletion

Write to [email protected] from the address on the account. We will send you what we hold, or erase it, within 30 days.