ChatLab
ChatLab · Agent platform · PL · www.chatlab.com
services/chatlab.yamlVendor data-handling terms
“No AI Model Training: We have opted out of providing customer data for AI model training with all AI service providers (OpenAI, Google Gemini). / Your personal data, conversations, and prompts are never used for training, fine-tuning, or improving AI models.”
“Chat conversation logs: 90 days from creation (customer-configurable) / System and technical logs: 180 days / Backup data: 90 days after deletion from production systems”
“Your personal data may be transferred and processed in countries outside the European Economic Area (EEA), United Kingdom, and Switzerland, including the United States, where certain service providers and infrastructure are located.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| chatlab.com | app | observed |
Assessment
Reasoning: An EU chatbot vendor with the specific commitments a deployer needs: provider-level training opt-outs named, fixed and configurable retention periods, and named transfer mechanisms for the US model providers. The remaining exposure is the model-provider hop itself, which the policy discloses rather than hides.
Flags: GDPR Chapter V (US model providers under DPF or SCCs) · End-user conversations (deployer is controller) · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Training, retention, and transfer terms verified against the ChatLab privacy policy.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.