ChatLab

ChatLab · Agent platform · PL · www.chatlab.com

Last verified 2026-09-16
Entry services/chatlab.yaml
Training on your data (default tier)
Not used for training; opted out with OpenAI and Google as model providers
Retention
Conversation logs 90 days by default (customer-configurable); technical logs 180 days; backups 90 days after deletion
Data residency
May be processed outside the EEA, including the United States, for AI and infrastructure providers, under DPF or SCCs

Vendor data-handling terms

Training on your data (default tier)
Not used for training; opted out with OpenAI and Google as model providers
No AI Model Training: We have opted out of providing customer data for AI model training with all AI service providers (OpenAI, Google Gemini). / Your personal data, conversations, and prompts are never used for training, fine-tuning, or improving AI models.
checked 2026-09-16
ChatLab Privacy Policy
Retention
Conversation logs 90 days by default (customer-configurable); technical logs 180 days; backups 90 days after deletion
Chat conversation logs: 90 days from creation (customer-configurable) / System and technical logs: 180 days / Backup data: 90 days after deletion from production systems
checked 2026-09-16
ChatLab Privacy Policy, Retention
Data residency
May be processed outside the EEA, including the United States, for AI and infrastructure providers, under DPF or SCCs
Your personal data may be transferred and processed in countries outside the European Economic Area (EEA), United Kingdom, and Switzerland, including the United States, where certain service providers and infrastructure are located.
checked 2026-09-16
ChatLab Privacy Policy, International transfers

Domains and endpoints

observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.

HostRoleSource
chatlab.comappobserved

Assessment

All plans: low

Reasoning: An EU chatbot vendor with the specific commitments a deployer needs: provider-level training opt-outs named, fixed and configurable retention periods, and named transfer mechanisms for the US model providers. The remaining exposure is the model-provider hop itself, which the policy discloses rather than hides.

Flags: GDPR Chapter V (US model providers under DPF or SCCs) · End-user conversations (deployer is controller) · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.

Changelog

  • 2026-09-16Documented. Training, retention, and transfer terms verified against the ChatLab privacy policy.
  • 2026-09-15Listed from the Unseen catalogue with observed domains.

Corrections

Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.

Edit on GitHub