Is data passed on or sold for training?

No. Your content and your visitors' conversation data are not passed on to third parties and not sold. They serve the operation of your assistant and the analysis for you, not external purposes.

Data sovereignty stays with you: you decide which sources the assistant uses and can have data removed according to the agreed deletion concept. The framework for this is described on the privacy and hosting page.

Technically there is little opportunity for it. The register of subprocessors lists the self-operated gateway for language models, behind which a specialised model provider generates the answers; search and similarity are computed by the system itself, without an outside service. A visitor's IP address is not held in plain text but as a checksum with a fixed addition, shortened beforehand for IPv6. An export of your data delivers only what the catalogue permits; columns marked as secret appear in no export.

Deletion is its own process and not a setting on the side. Eight object types carry a declared period, seven of which you set yourself, and without a set period nothing is deleted. Deleting an account requires a written-out confirmation word, writes the log line before the deletion and refuses the run against an incomplete catalogue; the activity log remains because the deletion itself is evidenced there. Which period applies to which type is stated on the privacy page.