Trust & security
Your visitors’ data stays yours.
ShowPilot talks to your buyers on your behalf. Their data is isolated to your organization, never used to train models, and exported or deleted when you say so.
Export or delete one visitor’s record.
Visitor record
jordan.lee@example.com
- Visitor
- Jordan Lee, jordan.lee@example.com
- Identified by
- Shared their email in chat
- Visits
- 3 visits, last on Tuesday
- Pages viewed
- Pricing, Integrations, Tours
- Questions asked
- “Does it sync with Salesforce?” and 2 more
- Conversations
- 2, with a booked meeting
- Retention
- Kept for 12 months after last visit
Every export and delete request is kept as an audit record.
Where visitor data goes, and where it never goes.
Every conversation your agent has belongs to your organization. Nothing about it trains a model, and nothing reaches a prospect from an address they don’t know.
- Isolated to your organization
- Every piece of data in ShowPilot belongs to one organization, and every read is limited to it. Knowledge search is kept separate per organization and per agent.
- Never used to train models
- Conversations are processed by our AI providers to run your agent. They are never used to train models.
- Pseudonymous product analytics
- ShowPilot’s own product analytics identifies visitors by a random identifier, and is hosted in the EU.
- Email comes from your reps
- ShowPilot never emails your prospects from a ShowPilot address. It sends from the rep’s own connected mailbox, or not at all.
- Your tags, your consent
- Agent milestones go only to your own Tag Manager container, under your consent setup. No contact details enter the data layer.
- Connected systems follow your policies
- Your CRM, Slack, and Tag Manager act on your instructions and keep their own copies, under your own agreements.
Switches you hold, not promises we make.
When a visitor asks what you hold on them, or asks you to delete it, you answer from one screen and keep a record that you did.
Recorded in the ShowPilot admin
- Export or delete a visitor
- Look up a visitor by email and see what ShowPilot holds. Export it as a file, or delete it all: everything tied to them, from conversations and leads to their analytics profile.
- A record of every request
- Each export and delete request stays as an audit record that can’t be edited or removed, including requests where nothing was found.
- Retention you choose
- 90 days, 6 months, 1 year, or 2 years after a visitor’s last activity. Then their conversations and records are deleted automatically. Leads you captured stay until you remove them.
- Pages it stays off
- Keep the agent away from your privacy policy, checkout, or any page where it doesn’t belong.
An agent that stays inside your rules.
Trust is also about what the agent says in your name. You decide what it draws on, what it never does, and when a person steps in.
- Answers only from your content
- It answers only from what you’ve given it: your pages, snippets and PDFs. Weak matches are left out, and when it can’t answer, it says your team will follow up instead of guessing.
- Guardrails and “never” rules
- You write its goals, its guardrails, and the things it must never say or do, in plain English.
- Numbered revisions you can restore
- Changes wait in a draft. Publishing creates a numbered revision, and you can restore an earlier one if a change doesn’t work out.
- A person can take over
- Your team sees live conversations, steps into the chat when it matters, and hands it back to the agent.
- Every decision is visible
- For any conversation, you can see what the agent decided and why.
Sub-processors
This list is being finalized. Email us for the current, complete list.
| Vendor | Purpose | Region |
|---|---|---|
| Anthropic | AI models that write the agent’s replies | US |
| OpenAI | AI models and search embeddings for your content | US |
| Pinecone | Search index for your knowledge content | US |
| Neon (AWS) | Primary database | US (East) |
| Railway | Hosting for the agent, background jobs and voice | US |
| Vercel | Dashboard hosting | US / global edge |
| Cloudflare | Content delivery, file storage, DNS | Global |
| Clerk | Operator authentication and billing | US |
| Stripe | Payment processing (card data never touches us) | US |
| Daily | Real-time voice/video infrastructure | US |
| Deepgram | Speech-to-text (voice conversations, video transcription) | US |
| Cartesia | Text-to-speech for voice conversations | US |
| HeyGen | Live video avatar | US |
| Anam | Live video avatar | US |
| Simli | Live video avatar | US |
| Nylas | Your reps’ calendar and email connections | US |
| Resend | Notification email to your team | US |
| Firecrawl | Web content import (your own public pages) | US |
| BigPicture | Company identification from a visitor’s IP address | US |
| PostHog | Product analytics | EU |
| Sentry | Error monitoring | US |
Questions about security?
Send security questionnaires, data questions, and vulnerability reports to info@showpilot.com.
Questions buyers ask.
Is my data used to train AI models?
No. Conversations are processed by ShowPilot’s AI providers to run your agent and are never used to train models.
Can other companies see my data?
No. Every piece of data belongs to one organization, every read is limited to that organization, and knowledge search is kept separate for each organization and each agent.
Can I export or delete a visitor’s data on request?
Yes. Look up a visitor by email, then export everything ShowPilot holds about them or delete it all, and each request is kept as an audit record. Copies already in your CRM or Slack follow your own policies there.
How long do you keep visitor data?
You choose 90 days, 6 months, 1 year or 2 years, with 1 year as the default. After that, conversations and visitor records are deleted automatically. Leads you’ve captured stay until you delete them.
Does ShowPilot email my prospects?
Not from a ShowPilot address. Email to prospects sends from your rep’s own connected mailbox, and is skipped when there isn’t one.
See it live, with the controls in front of you.
Book a demo and we’ll walk you through the agent and the settings that govern it.
Built by a small team that works with every customer.