What the agent sees, who can see your chats, and what is kept

Owners, admins, accountants, bookkeepers and tax advisors can use the chat. The two client roles (viewer and contributor) have no chat. Every step the agent takes is checked against your own role again, and it only reaches the client whose chat you are in.
A chat belongs to the person who started it, for one client. Owners and admins of the firm can see everyone's chats; every other role sees only its own. A chat is not visible to the client roles.
To answer, the agent sends an AI model your message (up to 8,000 characters), the recent part of the conversation, the record open on your screen, what its tools returned, and the files you attach (up to 5 files of 20 MB each). Text inside documents, contracts, cells and bank lines is treated as data and never as an instruction.
The app is built to refuse an AI provider that cannot keep processing inside the EU or EEA. Which provider and region your installation really uses, whether the provider keeps or learns from your data, and the agreement with it are not shown in the app: ask your administrator.
Every answer is marked AI-generated (with the model's name when it is known). The agent changes nothing in your books by itself: bookings, assignments, reminders and settings are proposals that a person accepts. It writes only invoice, offer and delivery note drafts, changes to those drafts, and new contacts (unconfirmed) directly.
The agent keeps a fact only if you accept a proposal for it, and it refuses health, religion, politics, union membership, origin and sex life. You can ask it to forget a fact, which again needs an accepted proposal.
Deleting a chat removes it from your Chats list but does not erase it: the conversation and its attachments stay in the system as part of the audit trail, and the deletion is logged. If you need data removed for data protection reasons, or want to know how long chats are kept, ask your administrator.