Privacy-by-default design
0xDoktor's answer-audit trail is minimized by a configurable per-account storage mode:
- Configurable question storage: by default, a 200-character preview of the question and answer is stored alongside a SHA-256 hash. Accounts can be configured for
hash_onlymode (no readable text, hash only) orfullmode (complete text) instead. - In-session context is ephemeral: conversation context used for multi-turn sessions is held in-memory during the session and is not persisted to disk. This is separate from the answer-audit trail, which persists per the configured storage mode.
- No personal data in the knowledge base: The knowledge base stores your documentation, not user data. User identity information is never ingested.
What data does 0xDoktor process?
When a user interacts with the widget, 0xDoktor processes:
| Data | Purpose | Storage | |------|---------|---------| | Question text | Embed + retrieve + answer | Answer-audit trail, per configured storage mode (hash-only / 200-char preview / full — default: preview) | | Conversation ID | Multi-turn context | Session memory only, ephemeral | | Confidence score | Quality analytics | Stored in aggregate | | Resolved/unresolved flag | Quality feedback | Stored, no PII | | IP address | Rate limiting | Hashed, short TTL |
Who controls the knowledge base?
The operator (your organization) fully controls the knowledge base. You decide what content is ingested, you can delete any document at any time, and the data lives in a Qdrant instance associated with your tenant. 0xDoktor cannot access your knowledge base except to serve queries for your tenant.
Data Processing Agreement
Enterprise customers can request a Data Processing Agreement (DPA) via the contact form. The DPA formalizes the controller/processor relationship as required by GDPR Article 28.
Consent for analytics
If you use the 0xDoktor widget on a site that requires cookie consent (e.g., under GDPR or ePrivacy Directive), the optional analytics features (PostHog, GTM) are gated behind the user's consent. No analytics scripts load before consent is given.
Data deletion
You can delete your ingested knowledge base content at any time from the admin dashboard — this is permanently removed from the vector database. Deletion of individual answer-audit records, analytics data, or full tenant-account data is not currently a self-serve feature; contact the 0xDoktor team if you need this for a compliance obligation.