Privacy policy and allowed domains

Two widget settings are organization-wide rather than per-widget: the privacy policy linked from every widget, and the list of domains a widget is allowed to be embedded on. Together they’re what makes a public widget defensible.

Privacy policy

• The organization-wide policy — set one privacy policy URL for your organization, and it’s linked automatically from every widget you create.
• Per-widget policy URL — a specific widget can override the organization-wide policy with its own URL, where that widget’s purpose genuinely needs different terms.
• Removing a policy — remove the organization-wide policy at any time; widgets fall back to showing no privacy policy link until a new one is set.

Allowed domains

A widget can only be embedded on a domain your organization has explicitly allowed — this is what stops your widget’s code being copied onto a site you never intended it for.

Seeing the list

Widget settings include an Allowed domains view listing every site your organization has been approved for. Check it here before you hand an embed snippet to a colleague, rather than finding out after the widget fails to load.

Changing the list

The view is read-only. To add or remove a domain, contact support.

What the list does not do

The list controls where a widget can be embedded, and nothing else. It does not make a widget’s knowledge private or limit it to signed-in users: anyone who can open the widget can ask it about what it knows. Only give a widget knowledge that is safe to share publicly.

Older embed codes

A widget added with an older iframe embed code still loads on websites that hide the referring page, but on those websites the list can’t be enforced. Replace the snippet with the current one from the widget’s Embed & deploy page. See Embed and deploy.

The AI disclaimer shown to visitors

Every widget shows visitors a standing disclaimer that answers are generated by an AI model and important information should be double-checked — this is fixed and can’t be turned off per widget.

What a visitor never sees

A visitor never sees your internal configuration — the widget’s instructions, the assistant model behind it, or (on a shared link) any references the answer might otherwise cite. They see only the conversation, the welcome message, and the privacy policy link.