Privacy & Security

Your Data is Secure:

Data Access:

• The AI Assistant only accesses your business data through secure API endpoints • All requests require authentication (your login session) • Every data request verifies that clients belong to your business before returning any information • Trainers can only access their assigned clients • Business owners can access business-wide data • Contact details (emails, phone numbers) are never sent to AI providers • All chat inputs are validated and sanitized before processing

Conversation Privacy:

• All conversations are stored securely in your account • Only you can access your conversation history • Conversations are encrypted in transit and at rest • You can delete conversations at any time • OpenAI does not store or retain your conversation data

No Training Data:

• Your business data is never used to train AI models • Conversations are not used for AI training (store: false enforced) • Your data remains private and confidential

Permissions:

The AI Assistant respects the same security permissions as the rest of BuildStability: • Role-based access (trainer vs business owner) • Client assignment restrictions • Business data isolation • Secure authentication required

Best Practices:

✓ Don't share sensitive information in conversations (though it's secure) ✓ Review conversation history periodically ✓ Delete conversations if needed for compliance ✓ The assistant follows all BuildStability security policies