vBridge AI Chat Assistant is a WordPress chatbot developed by vBridge Tech Ltd. On this demo page, messages you type are sent to an AI provider so the assistant can reply. Do not paste passwords, payment details, or other sensitive personal information into the chat.
1. Who we are
vBridge Tech Ltd (“we”, “us”, “our”) is a private limited company registered in England and Wales under company number 08023768. Our registered office is 285A Gateshead Road, Borehamwood, Hertfordshire, WD6 5LZ, United Kingdom.
We provide software development, web and mobile delivery, and products including vBridge AI Chat Assistant. For data protection purposes we are the controller of personal data processed on this product site and of personal data you send us directly (for example by email or phone).
This notice is written for UK GDPR and the Data Protection Act 2018. If you use vBridge AI Chat Assistant from outside the UK, local rules may also apply.
Our company-wide Privacy & Data Protection Notice is at https://vbridge.co.uk/dataprotection/. Where this page is more specific to vBridge AI Chat Assistant, this page takes precedence for that product.
2. What this notice covers
This notice covers two related uses of vBridge AI Chat Assistant:
- This product page (the vBridge AI Chat Assistant site hosted under vbridge.co.uk), including the live demo chatbot.
- The vBridge AI Chat Assistant WordPress plugin when a site owner installs it on their own website. In that case the site owner is usually the controller of visitor chats. We explain that split in section 7.
It does not replace a customer’s own privacy notice, a contract, or the privacy policies of OpenAI, Google, or any other AI provider the site owner chooses.
3. Data we collect
Depending on how you use vBridge AI Chat Assistant or contact us, we may process:
Chat content
Messages you type into the demo chatbot, a short in-browser history of the current conversation (used so follow-up questions make sense), and the model’s replies. We do not ask for your name or email in the widget.
Technical data
IP address (used to enforce rate limits and reduce abuse), browser and device information that your browser sends automatically, and standard web-server log data such as time, requested URL, and referrer.
Contact data
If you email, call, or use the contact form on vbridge.co.uk: name, company, email, phone number, and the content of your enquiry.
Plugin administration data (customer sites)
When a site owner configures the plugin, API keys and settings are stored on that WordPress install. Keys are encrypted at rest with AES-256 using WordPress salts. We do not receive those keys unless the owner sends them to us for support.
We do not sell personal data. We do not use the demo chat to build marketing lists.
4. How we use your data
- To run the vBridge AI Chat Assistant demo and stream a reply to your question.
- To keep the service stable: rate limits, message-length caps, and stripping HTML from input.
- To answer sales, support, and product questions you send us.
- To improve the product page and diagnose faults (for example from server logs).
- To meet legal obligations if a request, claim, or regulator requires it.
Chat transcripts on this demo page are not written to a conversation database after the reply is streamed. Temporary rate-limit records store request timestamps against a hashed IP for about one minute.
5. Lawful bases
We process personal data only where UK GDPR allows it:
- Legitimate interests — operating a product demo, preventing abuse, securing the site, and understanding how the page is used, where those interests are not overridden by your rights.
- Contract — taking steps at your request before a contract, or performing a contract if you buy or licence vBridge AI Chat Assistant or related services.
- Legal obligation — keeping records we are required to keep, or responding to lawful requests.
- Consent — where we rely on it (for example optional marketing from the main vBridge site). You can withdraw consent at any time without affecting processing that already took place.
Sending a message to the demo chatbot is a request for a reply. That processing is necessary for our legitimate interest in demonstrating the product. You can close the widget and not use chat if you prefer not to send a message to an AI provider.
6. AI providers
To generate a reply, the demo chatbot sends your message and recent conversation turns to the configured model provider. Today that is OpenAI and/or Google Gemini, depending on how this page is configured. Claude and Ollama are reserved in the product architecture and are not live on this page unless we say otherwise.
Those providers process the prompt in order to return tokens. They are independent controllers or processors of that content under their own terms. We do not sit in the middle of your (or a customer’s) billing with those providers.
You should not include special-category data (health, political opinions, religious belief, biometric data, and similar) or anyone else’s personal data in a chat unless you have a clear lawful reason. The model may produce inaccurate answers; do not treat chat output as legal, medical, or financial advice.
Provider notices (for their processing of prompts and any logging they perform):
7. The WordPress plugin on your site
When you install vBridge AI Chat Assistant on your own WordPress site, you are typically the data controller for visitor chats on that site. vBridge Tech Ltd supplies the software. We do not receive those chats, indexed pages, or API keys as part of normal plugin operation.
On a customer install, in outline:
- The visitor’s message is posted to a nonce-protected REST route on your WordPress server.
- If website knowledge is enabled, matching chunks from post types you chose to index are added to the prompt. That index lives on your site.
- Your server calls OpenAI or Gemini with your key. You pay that provider. vBridge does not bill model usage.
- API keys stay on the server and are not sent to the browser.
- You configure per-IP rate limits and message length on your install.
If you use the plugin, you must tell your visitors that a chatbot is present, what happens to their messages, which AI provider you use, and how long you keep any logs you add yourself. Your privacy notice should name you as controller. We can help with product facts; we cannot write your legal notice for every jurisdiction you serve.
If you send us a support email that includes logs, screenshots, or chat excerpts, we process that material as a controller (or as a processor if a written agreement says so) only to diagnose the issue, then we delete it when it is no longer needed.
8. Cookies and local storage
This product page does not set advertising cookies and does not load an analytics tag of its own.
The chatbot uses the browser’s session storage only for two flags: whether the panel has already been opened, and whether the visitor has started a thread. Those values stay on your device for the browser session and are not sent to us as identifiers.
Chat history for the current demo conversation is held in page memory and included with later messages so the model has context. Closing the tab clears it.
We load web fonts from Google Fonts. Google may process your IP address as a result. See Google’s privacy policy linked above.
The main vBridge website at vbridge.co.uk may use cookies and a consent banner. That is separate from this product page. Use that site’s cookie tools for those preferences.
9. Sharing and international transfers
We do not sell personal data. We may share it with:
- AI providers, as described above, when you use the demo chat.
- Hosting, domain, and infrastructure suppliers that keep this site online.
- Professional advisers (for example legal or accounting) where needed.
- Regulators, courts, or law enforcement if the law requires it.
- A buyer or successor if vBridge Tech Ltd is involved in a merger, sale, or restructuring, with appropriate safeguards.
OpenAI and Google may process data in the United States and other countries. vBridge also has delivery capacity in India. Where personal data leaves the UK, we rely on an appropriate safeguard such as the UK International Data Transfer Agreement, UK Addendum to EU Standard Contractual Clauses, or an adequacy regulation, together with technical measures such as encryption in transit.
10. How long we keep data
- Demo chat content — processed to generate a reply; not stored by us as a transcript after the stream ends. Providers may retain prompts under their own policies.
- Rate-limit records — about 60 seconds of timestamps, then discarded as the window moves.
- Web server logs — kept only as long as needed for security, diagnostics, and hosting operations, then deleted or overwritten in the ordinary log cycle.
- Email and support — for as long as the enquiry is active, then for a period needed for our legitimate interests and legal requirements (often up to six years for contractual records).
- Customer plugin data — remains on the customer’s WordPress site until they delete the plugin, the index, or the relevant settings.
11. Security
We apply technical and organisational measures appropriate to the risk, including:
- TLS for the chat request in transit.
- API keys encrypted at rest on WordPress installs (AES-256-CBC with WordPress salts); keys never shipped to front-end JavaScript.
- Nonce-protected REST routes on the plugin.
- Per-IP rate limiting, message length caps, and stripped HTML on input.
- Access to support mailboxes limited to people who need it.
No internet transmission is perfectly secure. If you believe there has been a personal-data breach involving vBridge AI Chat Assistant, email us immediately at the address below.
12. Your rights
Under UK GDPR you may have the right to:
- Access a copy of your personal data
- Correct inaccurate data
- Erase data in certain cases (the “right to be forgotten”)
- Restrict or object to processing, including processing based on legitimate interests
- Data portability, where the legal conditions are met
- Withdraw consent where we relied on it
- Not be subject to a solely automated decision with legal or similarly significant effects — vBridge AI Chat Assistant replies are informational and do not make such decisions about you
To exercise these rights, contact info@vbridge.co.uk. We may need to verify your identity. Some rights do not apply to data we no longer hold (for example a demo chat that was never stored).
If you used the chatbot on a third-party WordPress site that runs the plugin, send your request to that site owner. They control those chats. We cannot retrieve them from the plugin on their server.
13. Children
vBridge AI Chat Assistant and this product page are aimed at businesses and site owners, not at children. We do not knowingly collect personal data from anyone under 13. If you believe a child has submitted personal data, contact us and we will delete what we hold.
14. Contact and complaints
Questions about this notice or vBridge AI Chat Assistant data practices:
vBridge Tech Ltd
285A Gateshead Road
Borehamwood, Hertfordshire, WD6 5LZ
United Kingdom
Email: info@vbridge.co.uk
Phone: +44 203 488 9980
Web: https://vbridge.co.uk/
You also have the right to complain to the UK Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
https://ico.org.uk/
Helpline: 0303 123 1113
We would rather fix a problem first. Please write to us before you go to the ICO if you can.
15. Updates to this notice
We may change this page when the product, the law, or our providers change. The new version will be posted here with an updated date. Material changes may also be flagged on the vBridge AI Chat Assistant product page.