Privacy notice

Last updated: 5 October 2026

Voyant AI provides an AI chat assistant for websites. This notice explains what personal data we handle, why, and who else handles it. There are two groups of people: customers (website owners with an account) and visitors (people who use the chat assistant on a customer's website).

Who we are

Voyant AI is operated by Voyant Websites Ltd, a company registered in England and Wales (company number 16946394), whose registered office is 9 Bancroft Way, Wootton, Northampton, NN4 6BF, United Kingdom. In this notice, "we" and "us" mean Voyant Websites Ltd. We are the controller of customers' account data and the processor of visitors' chat data, as explained below.

Customers

Account details: your name or business name, email address and password (stored by our authentication provider as a one-way hash, never in plain text), your plan and usage.
Your website content: when you connect the WordPress plugin, the text of your published pages, posts and products (including prices and stock), your site name, tagline and menus, any notice you enter, and the settings and answers you give the assistant. Private and password-protected content, and pages you mark "keep out", are not sent.
Technical details: your site address and plugin version, so we can keep it connected and up to date.

We use this to provide the service, keep your assistant up to date, show you analytics and support you. Our legal basis is performing our contract with you.

Visitors

When someone uses the chat assistant on a customer's website, we process the messages they type and the assistant's replies so it can answer, and the customer can see what is being asked. If a visitor chooses to give their name, email address or phone number, it is passed to that customer as a lead. Visitors should not type sensitive information into the chat.

To show a visitor's messages to the customer as one conversation, the chat widget keeps a random visit identifier in the browser tab. It is not linked to a name or an account and is cleared when the tab is closed. Visitors can optionally rate a reply with a thumbs up or down. Each question is also given a short topic label (for example "Delivery"), created with email addresses and phone numbers masked first.

Test chats. The Test chat in the WordPress plugin lets a customer try their assistant before visitors see it. We keep what is typed there, and the assistant's replies, for up to 90 days so that we can see how the assistant is being used and improve it. They are visible to Voyant staff only, are not shown to the customer's visitors, and do not count towards the customer's plan. Customers should not type personal or sensitive information into the Test chat.

Help chats. The Help tab in the WordPress plugin lets a customer ask questions about using Voyant AI and improving their assistant. We keep what is typed there, and the Help assistant's replies, for up to 90 days so that we can improve our support. They are visible to Voyant staff only and do not count towards the customer's plan. To give advice about the customer's own assistant, the Help assistant is given a summary of that customer's assistant only: its settings, how much it has learned, and recent visitor questions and replies with email addresses, phone numbers and links masked. It is processed by OpenAI in the same way as the assistant's replies. The Help assistant never changes anything itself; a suggested fact or answer is added only when the customer presses Add. Customers should not type passwords or personal information into the Help chat.

For these visitors, the customer is the "controller" of the data and we act as their "processor". Customers should mention the chat assistant in their own privacy policy. The Analytics summaries shown to customers group questions into topics; email addresses, phone numbers and links are masked before questions are analysed.

Who else handles data

OpenAI — generates the assistant's replies and the topic summaries, and turns website content into searchable form. Content sent to it is not used by us for any other purpose.
Supabase — our database and sign-in provider.
GoCardless — collects Direct Debit payments for paid plans. It receives your name, email address and bank details directly from you on its own secure page; we never see or store your bank details.
Resend — sends our service emails (such as confirming your address).
Our hosting provider — runs the service.

Some of these providers process data outside the UK and EEA under appropriate safeguards.

How long we keep it

We keep account data while your account is open. Chat history is kept so customers can review it and delete individual conversations from the plugin. When an account is closed we delete its content, chats and leads. You can ask us to delete your data at any time.

Cookies

This website uses only what is needed to keep you signed in. The chat widget on a customer's site does not set advertising cookies.

Your rights

You can ask to see, correct or delete the personal data we hold, object to our processing, or complain to the Information Commissioner's Office (ico.org.uk). If you are a visitor to a customer's website, please contact that website first.