Data location and retention
Where AI processing happens for managed AI and for each BYOK provider, what providers retain, and how long ShopAssist keeps conversations.
ShopAssist
ShopAssist runs in the EU (Hetzner, Germany). Conversations, catalog and knowledge data are stored there. See hosting and architecture.
Managed AI
Managed AI uses only EU endpoints of the providers listed on the sub-processors page, under agreements without training on your data and with zero data retention or modified abuse monitoring where the provider offers it.
Your own key
With your own key, your provider processes the data under your agreement with it. What each provider says about location:
| Provider | Data location |
|---|---|
| OpenAI | Use a project created in the Europe region (eu.api.openai.com) for EU processing. Abuse-monitoring logs may be kept up to 30 days unless you have zero data retention or modified abuse monitoring. |
| Anthropic | Anthropic's API processes data globally or in the US; there's no EU option. For EU processing use Claude on Google Vertex AI (EU) or Amazon Bedrock (EU) under your own cloud account. |
| Google Gemini | Only paid-tier keys are accepted. Google doesn't guarantee EU processing on the Gemini API; use Vertex AI for EU residency. |
| Azure OpenAI | Use an EU Data Zone or EU regional deployment. Global deployments may process data anywhere. |
| Mistral | Processed in the EU. Inputs and outputs are kept for 30 days for abuse monitoring unless you have zero data retention. |
| OpenAI-compatible | Data goes wherever this endpoint runs. Self-hosted endpoints must be reachable over HTTPS with authentication. |
| Routers (OpenRouter, Groq, Together) | This service may route requests to other providers in other countries. Check its data-processing terms. |
What is sent to the model
The shopper's messages, the store data needed to answer (product facts, stock, hours, knowledge excerpts, the verified shopper's order details) and your assistant settings. Card numbers and ID numbers that shoppers type are removed before the model sees them. Your API keys and other shoppers' data are never sent.
Retention in ShopAssist
| Data | Default |
|---|---|
| Conversations | 90 days after they end (you can shorten it to 7 days, or delete on close; your plan sets the maximum) |
| Test and playground conversations | 7 days |
| Uploaded photos | 24 hours |
| Analytics | 13 months |
All defaults: retention.
Last updated on