Review External AI Services

Review OpenAI, Google Gemini, and optional vector-storage integrations, identify data sent by enabled AI features, and check provider privacy terms.

Review external AI services configured in Dragwyb Click to Chat before enabling visitor-facing features. The provider used for chatbot responses may differ from the provider used to create knowledge-base embeddings, because those settings can serve different purposes.

Where to review AI provider settings

  1. In WordPress admin, open Click to Chat → AI Assistant.
  2. Open AI Engine & Prompt to review the configured response provider, model, and API-key configuration.
  3. Open Knowledge Base and review the Embedding Configuration provider. The source exposes OpenAI and Google Gemini options for embeddings.
  4. Review which AI features are enabled, including chatbot responses, knowledge-base indexing, and any image-analysis options you have configured.

Which external AI services may be involved?

  • OpenAI: When selected and used, prompts and chat content may be sent to OpenAI to generate responses. Knowledge-base text may also be sent for embedding generation. If image attachments are enabled for a vision-capable model, the configured AI request may include image content.
  • Google Gemini: When selected and used, chat inquiries may be sent to Google AI for responses, and knowledge-base text may be sent for embeddings.
  • Pinecone: If Pinecone is selected as the vector-storage provider, generated text embeddings are stored in Pinecone indexes for semantic search. Review both the embedding provider and the vector-storage provider.
  • Other providers: Provider availability depends on the installed edition and configuration. Verify the provider actually selected on your site instead of assuming every supported or advertised provider is active.

The plugin source uses the WordPress AI Client when it is available for supported provider calls, and includes direct HTTP fallback paths for provider APIs in some cases. Do not assume that all requests are routed through one mechanism in every WordPress environment.

Information to review before enabling a provider

  • Which visitor prompts, conversation messages, system instructions, knowledge-base text, or attachments are included in the request.
  • Whether knowledge-base indexing or image analysis is enabled and which provider handles that operation.
  • Which API key and account are used, who controls that account, and which provider terms apply.
  • Whether support conversations, lead details, or other personal information could be included in prompts through your configured workflow.
  • How long your WordPress site retains conversation history, logs, and related records; local retention settings do not automatically define the provider’s retention practices.

Review provider terms and privacy information

Recommended privacy review

  1. Test with non-sensitive sample prompts before using real customer data.
  2. Confirm the active response provider and embedding provider independently.
  3. Review provider terms and the account’s available data controls.
  4. Update your website privacy notice to describe the external processing that actually occurs on your site.
  5. Review local conversation and error-log retention settings in Configure Data Retention.

Related guides

Important: This guide helps you identify configuration and data-flow questions. It is not a legal compliance guarantee. Verify your own enabled features, provider accounts, and applicable privacy obligations.