How we protect your data

• Widget isolation. The chat runs in an iframe on widget.supportlime.com. Your page's scripts cannot read the conversation and the widget cannot touch your page. It sets no third-party cookies.
• Origin checks. The widget only loads on the domains you allow. Every message carries a signed visitor token; public keys identify a site, never authorise anything else.
• Tenant isolation. Every row is scoped to a workspace. API keys act on one workspace and cannot be pointed at another.
• Encryption. TLS 1.2+ everywhere in transit. Data at rest is encrypted by the hosting providers (MySQL volumes, Cloudflare R2 and Vectorize).

• Passwordless login with one-time email codes, Google or Apple. No passwords to leak.
• Roles: owner, admin, agent. Billing is owner-only; API keys and webhooks need owner or admin.
• API keys are stored as SHA-256 hashes and shown once. Webhook deliveries are signed with HMAC-SHA256.
• Staff access to customer data is limited to support requests and logged.

• Per-visitor, per-IP and per-site rate limits; honeypot fields; a Turnstile challenge when a site is under unusual load.
• The assistant answers only from your content and is instructed to ignore instructions inside visitor messages or crawled pages. It never reveals its instructions.
• Spend circuit breakers cap AI usage per workspace and globally, so a bot cannot run up a bill overnight.
• Your content and conversations are never used to train AI models; our providers are used under no-training terms.

• Conversations and tickets are kept while your account is active (Free: 30 days of analytics history, paid: a year or more).
• Delete a contact and every conversation attached to it from the dashboard or API. Delete a website to remove its knowledge, chunks and vectors.
• Closing your account deletes the workspace and everything in it within 30 days; backups roll off within 35 days.

GDPR: we act as processor for visitor data; a Data Processing Agreement and the sub-processor list are published. SOC 2 is not yet in place; we are a small company and say so rather than imply otherwise.