Privacy policy

Aptli assistant is operated by Tacit Insight Ltd., a Canadian company, under the Aptli brand. This policy covers the assistant product: the console at chat.aptli.io, the chat gateway at agent.aptli.io, the inference service at ai.aptli.io, and the widget that site owners place on their websites. Last updated 27 August 2026.

Where processing happens

Inference runs on servers Tacit Insight Ltd. rents from Vexxhost in Montreal, Canada. The chat gateway, the knowledge store, the page digests it reads, analytics events, and any stored transcripts live on those same Canadian servers. The console and its account database run on Cloudflare. Billing runs on Stripe. Email runs on Resend.

What we process for site owners

• Account details: email address, the name you give your site, your site address, sign-in security settings (an authenticator secret and hashed recovery codes when you enable them).
• The content you supply for the assistant: pages we crawl from your site, files you upload, pointer files you register, entries you write, and the actions you declare.
• Billing details held by Stripe: Stripe stores your payment method; we store your Stripe customer and subscription identifiers and your plan.
• Support tickets you open from the console: subject, description and status, held by the Aptli support portal and mirrored by reference on the gateway.

What we process for visitors of a site that uses the assistant

• The conversation: the visitor's messages and the assistant's answers. The gateway processes them in Canada to produce each answer and does not retain them. The visitor's browser keeps the current conversation so it survives a page reload; the visitor can clear it from the widget.
• A digest of the page the visitor is on: the main text of that page, with navigation, footers, scripts, hidden fields and credential fields removed, sent by the site owner's page for the duration of a conversation.
• Details the visitor types into an action the assistant proposes and the visitor confirms, such as a contact form or a request for a person. These go to the site owner by email or to the site owner's own website. Nothing about them is stored on our side.
• Content-free analytics events: a timestamp, the page path, a two-letter country code, the topics the answer drew on, and which action ran. Message text is never part of an event. Events are kept for 400 days.

Transcript storage is off by default

A site owner can turn transcript storage on from the console. When it is on, the gateway encrypts each turn with a public key generated in the site owner's browser and stores only the ciphertext. The matching private key stays with the site owner; Tacit Insight Ltd. cannot read stored transcripts. Turning storage off stops new transcripts; the console also deletes stored ones on request.

Cookies and browser storage

The console uses one session cookie to keep you signed in. The widget stores the current conversation and an anonymous visitor identifier in its own browser storage on the console's origin. Neither is used for advertising.

Sub-processors

Retention

Account and tenant data stay for the life of the account. Deleting the assistant from the console removes the knowledge store, analytics events, stored transcripts, ticket references and every account on the tenant. Preview digests created by the try-it-out page expire after six hours. Stripe keeps billing records for as long as tax law requires.

Your rights

You can read, correct, export and delete your account data from the console. Visitors who want to know what a site's assistant processed should contact that site's owner, who controls the assistant; for questions about Tacit Insight Ltd.'s own processing, write to [email protected]. We answer within 30 days.

Changes

We post changes on this page with a new date. Material changes are announced to site owners by email.