Know where conversation data is stored
Ask your chatbot vendor plainly: where does chat data live, who can access it, and for how long is it retained? You should be able to answer this confidently if a visitor or regulator asks, rather than having to go find out after the fact. A vendor that can't answer this clearly themselves is a warning sign about their own data practices.
This is a reasonable question to ask before signing up for any chatbot platform, not just after you're already using one — it belongs in your evaluation checklist alongside pricing and setup time.
Update your privacy policy
If you're collecting chat conversations, your privacy policy should mention it — most site owners overlook this when adding a new tool, treating it as a technical install rather than a change to what data they're collecting. A short addition covering what's collected through chat and roughly how it's used closes this gap.
This is a quick fix once you're aware of it, and it's the kind of detail that matters more in the aggregate — across every tool your site uses — than any single tool in isolation, but it's worth getting right for each one.
Don't design flows that collect more than needed
If your chatbot doesn't need a visitor's phone number to answer their question, don't build a flow that asks for it anyway, even if it seems like a convenient way to capture a lead. Collecting data you don't need adds risk without adding proportional value, and it's the kind of practice that erodes visitor trust if noticed.
A useful discipline: for every piece of information your chatbot flow asks for, be able to state exactly why it's needed to answer the visitor's question or serve them better. If you can't, reconsider asking for it.
Have a plan for data requests
In jurisdictions with data protection regulations, visitors may have a right to request what data you hold about them, including chat history, or to request deletion. Know in advance how you'd fulfill such a request through your chatbot vendor's dashboard or support channel, rather than figuring it out for the first time when someone actually asks.
