Chatbot data privacy for online stores: a GDPR checklist for AI chat
An AI chatbot on a store handles message text, order lookups, leads and sometimes uploaded documents, which makes it part of your GDPR obligations. This checklist covers what data flows where, the questions to put to a vendor (DPA, subprocessors, encryption, retention, model training), how to minimise what the bot collects, how deletion and export requests are handled, and what to tell shoppers.