AI and Your Data

Which AI providers power Gallabox’s AI features, what data is sent to them, how long it’s kept, and whether it’s used to train AI models.

Who can use this?

• This information applies to all Gallabox plans and roles.

Gallabox’s AI features send the data they need to third-party AI providers to generate a reply. AI only processes data in features you turn on or use. Your data is processed in the United States, and it isn’t used to train AI models.

At a glance

Item	Detail
AI providers	OpenAI, Google Cloud (Gemini), xAI
When AI runs	Only in features you turn on or use
Where it’s processed	United States
Kept by AI providers	Up to 30 days, for abuse monitoring
Used to train AI models	No

How it works

When you use an AI feature, Gallabox sends the AI provider only what it needs to write a reply. The provider sends the reply back to Gallabox.

To generate a reply, Gallabox sends the provider:

• The current message and the conversation history, so the reply fits the conversation
• Contact details, such as name and phone number, only when your AI agent’s configuration uses them
• Your instructions, such as the agent’s Role, Goal, and Instructions, or the prompt in a bot node
• Relevant extracts from your Knowledge Base, when the agent or node is connected to one
• Call audio, for calls answered by the Voice AI Agent

Your full Knowledge Base never goes to the provider. Gallabox stores your files, website pages, and the search index built from them on its own infrastructure in AWS. Only the extracts that match the question are sent.

AI providers

Gallabox uses AI models from:

• OpenAI
• Google Cloud (Gemini models), which also powers the Voice AI Agent
• xAI

Most requests go directly to the provider. Some features route requests through Vercel AI Gateway or Amazon Bedrock to one of these providers. All of these companies are listed as sub-processors in Annex III of our DPA.

Features that use AI

• Chat AI Agent on WhatsApp, Instagram, and Web Chat
• The GPT Dialog and GPT Knowledge Base nodes in bot flows
• AI Reply, AI Rewrite, and AI Translate in the Inbox
• Rewrite with AI when you create a template
• Instagram Comment Automation
• The Voice AI Agent for incoming WhatsApp calls

There’s no account-wide switch to turn AI off. To stop AI processing, turn off or unassign your Chat AI Agents, remove GPT nodes from your bot flows, and stop using the AI tools in the Inbox.

Retention and training

AI providers may keep requests and replies for up to 30 days to monitor for abuse, and then delete them. They don’t use data sent through the API to train their models.

Gallabox keeps AI conversations, chat logs, and Knowledge Base content on the same retention schedule as the rest of your account data. See the Privacy Policy for details. Gallabox doesn’t use your data to train AI models. It does use AI conversation data to review reply quality, improve AI features, produce usage analytics, and bill AI credits.

Related Articles

• Sub-processors — third-party services Gallabox uses
• Data Security — how Gallabox protects your data
• Chat AI Agent — set up an AI agent
• AI Wallet — features that use AI credits