The chat on your site
Anyone can type anything. The chat agent only reaches that conversation.
HomeProtection and access
A customer message is not a permission.
Someone may try to talk your agent into revealing information or doing something you did not allow. Access limits do what instructions alone cannot.
Where outside words meet your agent.
Form answers
Answers are data your agent reads, never orders it follows.
Social messages
Instagram and WhatsApp messages never enter your meeting memory.
An agent with full access trusts every sentence it reads.
If the agent answering your customers also holds your account, one clever message can make it read or change what it should not.
Without an agent, every time
One key for everythingall your data
Instructions as the only guardeasy to trick
No record of what was doneno trace
Revoking accessstarting over
The weakest conversation decides how safe your whole account is.
Each agent reaches only what its job needs.
The chat agent gets a credential for its channel. Your own agent gets the scopes you grant. Nobody gets the rest.
- The visitor reads and writes only in their own conversation
- The chat agent answers only the conversation assigned to it
- Your agent asks for more access, and you approve it
- You take over, restore or revoke at any moment
“Which agents can read my conversations, and until when?”
Listed 2 connections with chat access
One expires in 30 days
No connection can publish without you
Access reviewedChange or revoke any of them in Agents and access.
Three roles, three limits.
- Your site
- Site chat
- Conversations
- Your agent
The visitor, the chat agent and you each see a different part, on purpose.
Access control, not invulnerability.
Limits and receipts
Size and rate limits, temporary receipts and revocation reduce specific risks.
Dedicated agent
Run the chat agent without personal memory, private files or unrestricted tools.
Honest boundary
We cannot remove access your agent already has outside the platform.
What people ask before starting.
Can a visitor see other conversations?
No. A visitor's access covers only their own conversation, and internal notes never appear to them.
What happens when I take over?
Pending answers from the agent are cancelled, and you reply as yourself.
Do you guarantee no attack works?
No. Limits reduce risk; no text filter recognizes every attack. That is why access is limited instead.