Privacy

October 2026.

The assistant is built to keep as little as possible.

What is sent to the AI company

When a visitor asks a question, these go to the AI company you chose under Settings → Assistant (Anthropic or OpenAI) so its AI can write the answer:

• the question and the last few messages of that chat (up to ten);
• the passages from your pages that match the question, your business details and your notes and Q&A.

Nothing about who the visitor is: no name, account, internet address or cookie. The AI key is sent from your website only, never from the visitor's browser.

Photos

If you switch on Visitors can add photos (it's off to start with), a visitor can add up to two photos to a message. Their browser makes each photo smaller first, then it goes with the question to your AI company and nowhere else. Photos are never kept: not saved on your website, not in its database, and not in kept conversations, which only note "[photo]". Only the latest message's photos are sent; earlier ones are not sent again. Each visitor can send 5 photos a day to start with (you can change it).

The assistant doesn't identify people and never assesses anyone's hair, scalp, skin or health from a photo; it suggests a consultation instead.

What is kept

• In the visitor's browser: the chat, for as long as the browser tab is open. It's gone when they close it.
• No cookies. The assistant sets none, so it doesn't need to be in your cookie banner.
• On your website: to stop misuse, it counts how many messages come from each internet address each day. It keeps only a scrambled (hashed) form of the address, deleted within a day.
• This month's spending and how many answers it has given (just numbers).

Keeping conversations (optional)

You can keep conversations for 30 days, to read what people ask and improve the answers. It's off to start with.

To switch it on: Settings → Assistant → Conversations, switch on Keep conversations for 30 days so you can read them and improve answers, and click Save changes. Add the paragraph for it to your privacy policy first (see below).

Then, under your business menu → Assistant → Conversations:

• each conversation is listed with its date, its first question and how many messages it has;
• click the first question to read the whole conversation;
• click Delete to delete one, or Delete all to delete every kept conversation.

Only the messages are kept, never who wrote them. Each conversation is deleted by itself 30 days after its last message. If you switch keeping off, no new ones are kept, and the ones already kept are still deleted after 30 days.

If someone has typed their own details into a kept conversation, delete that conversation.

Your privacy policy

Go to Settings → Privacy → Policy guide (WordPress's own privacy screen) and find Gradespace Assistant. Copy the suggested paragraphs into your privacy policy page:

• the first two always, once the assistant is on (they name the AI company chosen when you copy them: if you switch company later, change the name in your policy too);
• the photo paragraph, which appears once Visitors can add photos is switched on;
• the next one only if you keep conversations.

Requests to see or delete personal data

The assistant stores nothing linked to a person, so there's nothing for it to find in Tools → Export Personal Data or Erase Personal Data. If someone asks you to delete a chat they had, and you keep conversations, look for it under Assistant → Conversations by its date and first question, and delete it.