Assistant privacy

Which data goes to the AI provider when you ask a question, what never leaves, and what happens if the installation has not turned the assistant on.

StockAI runs on its server: your sales, stock, suppliers and purchase orders live in that database and on that disk. The assistant is one of the few things that opens a connection to the outside, and only if the installation configured it.

One provider: DeepSeek

Every AI feature in StockAI — the web assistant, the WhatsApp bot, the written summaries and the data diagnosis — uses a single provider: DeepSeek, over HTTPS. There is no second provider and no fallback chain: if the key is missing or mistyped, the feature turns off; your data never ends up at another provider by accident.

What is sent with each question

• The question you typed and the latest messages of that conversation.
• The account context needed to answer it: product codes and names, quantities, costs and supplier names for the products the question is about.
• Your first name, your role and your company name, so the answer speaks to you.
• What the read-only tools return when the assistant looks up a product, a supplier or an order.

The account brief is capped at about 7,000 characters per question: it is a selection of what is relevant, not your whole database.

What is not sent

• Your original sales files or your full history.
• Passwords, API keys or credentials.
• Anything while you are not asking: there is no telemetry and no background traffic to the AI provider.

The forecast, the stock signal, purchase recommendations and alerts are computed on the StockAI server and never go through the language model.

If the installation does not turn it on

Without the DeepSeek key, nothing goes to the AI provider. The assistant does not error out: the screen says it is unavailable and, if you ask anyway, it answers with a rule-based summary of your data that opens with "The AI assistant is not enabled on this installation, so here is what your data says directly:". What you lose is the conversation; the rest of StockAI works the same.

Turning it on is done by whoever administers the server, under Installation, card "Assistant (DeepSeek)".

Your own AI client (MCP)

This is the opposite direction (and it comes with the Pro, Max and Corporate plans): if you connect your own AI client to StockAI over MCP, StockAI opens no connection; your client calls in, reads with your API key and leaves. That client can read your stock, your costs and your supplier names, so treat the key like any other credential and revoke it once it is no longer used.

The full data-processing terms are in the Privacy policy.