Data retention and privacy

What Clayo stores, for how long, and how sensitive values are protected.

Visitor conversations

When someone uses Ask AI on your docs site or the support widget, the conversation is stored so you can review it in Insights and mine it for gaps.

• Conversations are anonymous. Clayo does not collect visitor identity: no accounts, no emails, no tracking profiles. A conversation is just the questions, the answers, and which articles were cited.
• Conversations are kept for 30 days, then deleted automatically. Insights metrics report over the same 30-day window.

Activity feed

The Recently feed on your project Home shows live-site changes (publish, update, unpublish, remove) with who did it and through which tool. Events are kept for 7 days. Draft edits are not recorded; the feed tracks what changed on your public site, not work in progress.

Reads and analytics

Docs reads are counted in daily aggregate rows, split between human visitors and AI agents. No per-visitor records, no cookies for analytics, no IP addresses stored with counts. The Insights page reports the last 30 days.

Your OpenAI key

The key you add for AI answers is treated as a secret from the moment you save it:

• Encrypted with a dedicated key management service (AWS KMS) before it is stored.
• Write-only. No API returns it, it never appears in logs or the admin interface, and it cannot be viewed after saving. Only the last four characters are kept for display, so you can recognize which key you added.
• Used solely to call OpenAI for your project's embeddings and AI answers.

If you suspect a key leaked somewhere else, replace it in Account, under Keys, at any time. Removing it never touches your content.

API keys and sessions

• Clayo API keys are stored as one-way hashes. The full value is shown once at creation and cannot be recovered afterward, only revoked and replaced.
• OAuth connections from your coding tools use short-lived tokens that rotate automatically. Revoking a connection in Account, under Keys, signs that tool out everywhere.
• Dashboard sessions use secure, HTTP-only cookies and stay valid for 30 days of activity.

Your content

Articles, sections, collections, and uploaded images persist until you delete them. Deleting an article, collection, section, or project is permanent and immediate; there is no trash bin or restore. Published article URLs that changed slugs keep redirecting for the life of the article, as covered in Links, slugs, and redirects.