Skip to main content

Privacy and Compliance

Hunch includes workspace-level controls for data minimization, retention, export, and destructive delete workflows.

Redaction Policy​

Set the overall PII (Personally Identifiable Information) redaction level to:

  • off
  • standard
  • strict

Choose which stored areas receive redaction treatment, including:

  • Chat transcripts
  • Answer traces
  • Analytics payloads
  • Handoff notes
  • Lead message bodies

Retention Windows​

Retention can be configured separately for:

  • Chat transcripts
  • Analytics events
  • Lead captures
  • Human handoffs
  • Answer traces
  • Security events

Leave a bucket unset to keep it indefinitely, or define a retention window in days.

Retention Sweeps​

Hunch can run retention cleanup manually from Settings. Retention checks also run as part of the broader compliance workflow.

Run a manual sweep when:

  • You just changed the policy
  • You are responding to a privacy request
  • You want to verify the new retention window behaves as expected

Compliance Report​

The built-in compliance report summarizes:

  • Workspace member count
  • Operator security posture
  • Stored data inventory
  • Recent compliance activity
  • Recommendations and warnings

This report is useful for internal reviews, customer questionnaires, and operational audits.

Workspace Export​

Workspace owners can export the full workspace dataset for:

  • Privacy requests
  • Internal archive workflows
  • Compliance review
  • Migration or backup use cases

Account and Workspace Deletion​

Workspace owners can also permanently delete the owner account and its workspace from Settings.

This is destructive and removes the workspace, including operational history tied to it.

Recommendations​

  • Turn on at least standard redaction for teams handling sensitive conversations.
  • Set explicit retention windows instead of leaving all buckets indefinite.
  • Review the compliance report after major workflow changes.
  • Pair compliance controls with MFA, IP allowlists, and enterprise session policy.

See also: