This policy explains the Inner Safety Healing assistant. It supplements the main website privacy policy.
Inner Safety Healing, Evdoxia’s practice. For privacy questions or access/deletion requests, contact evdoxia@innersafetyhealing.com. The assistant is AI, not Evdoxia, a therapist or an emergency service.
Your selected language, required first name, optional email, messages, button replies and answers to custom questions are processed to respond and maintain the conversation. Avoid health information, trauma histories or other sensitive details. Short-lived network identifiers protect against abuse; we do not use device fingerprinting or infer identity from an IP address.
Authorized Inner Safety Healing administrators can review, search, export or delete chats and the contact details you provide. Chats are encrypted in the application database hosted on Hostinger. We retain chats and enquiries for 30 days and consent/action records for 30 days. Chat retention starts when the conversation is created; it is not extended by every message. Expired records are excluded immediately and removed by scheduled cleanup.
Messages needed to answer your question and approved public reference material are processed server-side using OpenAI. Chat content is not uploaded into the public knowledge base or used by this app to fine-tune a model. OpenAI requests use store:false; provider-side retention and processing are governed by the provider’s terms. Brevo processes separately approved email actions. Mailchimp processes newsletter requests only after explicit, separate permission and double opt-in. Hostinger hosts the application and database. Provider records and backups have their own retention; deleting a chat does not automatically delete third-party records.
Remember my details is optional and off by default. If enabled, this browser stores an opaque random token, with a maximum of 30 days. Your name/email remain encrypted on the server; transcripts are not kept in browser storage. This works in the same browser/site only, may be shared by people using that browser, and does not identify you across devices. My details lets you edit your information or forget it. Withdrawing chat permission removes the browser token. Clear chat removes the conversation; remembered details remain only if you chose to remember them.
Providing an email does not subscribe you to marketing. Resource delivery, practical enquiries and newsletters have separate confirmations. We do not automatically email a full transcript. An authorized administrator may manually email a reviewed/redacted conversation to a confirmed recipient for handling an enquiry. Email transport and the recipient’s mailbox have separate retention.
You choose whether to start chat. The opening consent links to this policy. You can close chat, clear the current conversation, edit or forget remembered details, or contact us about access, correction and deletion. Retained consent/action receipts are separate and protect against duplicate sends. The dashboard uses aggregate counts of retained chats, languages and request statuses; no extra tracking events or cross-site profiling are enabled.
This notice describes this chatbot’s current processing and the controls provided here. The main website policy covers the surrounding site. Last updated 4 November 2026.
If you choose to leave a star rating or comment, we store it with your conversation reference, first name and selected language to improve the chat experience. Feedback is optional, is visible to authorized administrators, is not sent to Mailchimp or automatically emailed, and is kept for up to 30 days after submission. Clearing or deleting the associated conversation also deletes its feedback.
We keep daily technical totals such as model names, API operation counts, token counts, durations and error categories to monitor reliability and costs. These totals contain no chat text, names, email addresses, visitor/session identifiers or IP addresses. They are separate from conversation records and are normally kept for 90 days, configurable by the administrator. Access is restricted to authorized administrators.