privacy
Data We Collect
What data UserBoost collects about your website visitors
This page describes what visitor data the UserBoost widget collects, where it's stored, and how it's used.
Data Collected
| Data | When Collected | Stored Where |
|---|---|---|
| Chat messages | Every conversation | conversations table (JSONB) |
| Visitor ID | On widget load (if provided by your code) | conversations.visitorId |
| Thumbs feedback | When visitor clicks thumbs up or thumbs down | conversations.feedback (JSONB) |
| Contact form data | When visitor submits the form | tickets table (name, email, phone, message) |
| Page URL | On form/rating submission | tickets.pageUrl, popup_ratings.pageUrl |
| Popup ratings | When visitor submits a rating | popup_ratings table (anonymous) |
Data NOT Collected
- IP addresses — not stored
- Cookies — the widget uses
sessionStorageonly (not cookies) - Browser fingerprints — not collected
- Geolocation — not tracked
- Browsing history — only the current page URL on form submission
Data Retention
Data is retained indefinitely unless:
- You delete it via the data deletion tool
- You delete the domain (all associated data is cascade-deleted)
Third-Party Data Sharing
Visitor messages are sent to:
- Anthropic (Claude AI) — for generating responses. Subject to Anthropic's data usage policy.
- Voyage AI — for generating text embeddings (semantic search). Query text only, no PII.
- Your webhook URL — if configured, message and ticket data is forwarded.
No visitor data is shared with any other third party.
GDPR Roles
- You (the website owner) are the data controller
- UserBoost is the data processor
- Visitors can request data deletion through you
See Data Deletion for how to handle deletion requests.