An ordinary AI chat works simply: everything the visitor types goes to the model. Name, phone number and email included. For a European business that raises two awkward questions at once.
The task
The first question is where the personal data went and into which jurisdiction. The second is quieter but more expensive: an AI adviser that merely answers questions earns nothing. The one that earns is the one that carries a conversation through to an enquiry.
The approach
Personal data never reaches the model. The enquiry is collected by a state machine with buttons: consent, email, preferred channel. Not generation. The format is therefore guaranteed, and the model is not admitted to personal data at all — it is stripped before sending and stored encrypted. This is not a setting someone can switch off by accident; it is a property of the architecture.
A European provider. The model is French. Data does not cross the Atlantic, and the question of third-country transfers is settled by the choice of supplier rather than by caveats in a privacy policy.
Consent recorded with its wording. Not just that consent was given, but which version of the text it was given to. Export and erasure work through the standard WordPress privacy tools.
Two channels, one assistant. The website widget and the Telegram bot run on the same pipeline: one sales script, one conversation history, one enquiry flow.
The sales script is edited in the admin — the assistant’s persona, the stages of the conversation, the service catalogue, objection handling. No developer required.
Abuse protection: honeypot, Turnstile, per-session and per-address limits, a daily token budget, automatic blocking.
The result
Enquiries arrive in the CRM ready to use: contact, tags, a summary of the conversation. The manager gets a notification — in Telegram, carrying no personal data, only the signal.
The real point is that this adviser can be put in front of a European client without caveats. Normally AI on a website has to be defended to a lawyer. Here there is nothing to defend: the data never reaches the model.