> For the complete documentation index, see [llms.txt](https://docs.suvvy.ai/en/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.suvvy.ai/en/main-settings/dopolnitelnye-nastroiki/safety.md).

# Safety

## Masking personal data

We recommend that when communicating with a client, you request their **consent to the processing of personal data**.

To enable masking, go to additional settings, select the Security tab and enable the Mask personal data flag.

<figure><img src="https://2542240793-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnmK9dnkx224HgS0VSB5J%2Fuploads%2FVJUfzlZZLDayAI0bU3Ue%2Fimage.png?alt=media&amp;token=109bf8f6-9e15-4fad-b455-09a3d0a35254" alt=""><figcaption></figcaption></figure>

### How does the process of masking personal data work?

1. **Masking data**

* Personal data (for example, passports and phone numbers will be replaced with masked values)

2. **Transfer of anonymized data**

* Once masked, the data is no longer considered personal and is passed to the model for processing.

3. **Unmasking and transmitting the response**

* The received response will be unmasked back to the server of your country.

Thus, your personal data remains on the **servers of your country**, and the model receives **anonymized data**.

### What does masking look like in chat?

{% hint style="info" %}
In the chat manager and dialog export, we've added a modal window with information about how the model generated the response — what the message was before and after masking, what the instructions were, and what the dialog history is.\
All of this contributes to better understanding when analyzing the bot's responses.
{% endhint %}

To see the masking of **Personal Data** in the **Chat Manager** mode, click on the icon in the message field

<figure><img src="https://2542240793-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnmK9dnkx224HgS0VSB5J%2Fuploads%2FzaDcupQSwqhEMxTLwg3U%2Fimage.png?alt=media&amp;token=334ab891-8e3c-4c53-bf45-0dba4acefe5e" alt=""><figcaption></figcaption></figure>

A modal window will open, along with the **bot's last message with a transcript**—what the message looked like when personal data was masked, and what message was **sent to the Client**:

<figure><img src="https://2542240793-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnmK9dnkx224HgS0VSB5J%2Fuploads%2F1TKyKuS1l1f6XpSga9Zh%2Fimage.png?alt=media&amp;token=540306ce-92c8-4ebe-88f2-62368af1ac38" alt=""><figcaption></figcaption></figure>

### Media transfer in LLM

<figure><img src="https://2542240793-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnmK9dnkx224HgS0VSB5J%2Fuploads%2FYOQncuVNSBkC043q5okM%2Fimage.png?alt=media&amp;token=59e411c2-11cb-45df-b3f9-b3a8573d6c54" alt=""><figcaption></figcaption></figure>

This setting prevents media files from being passed to the LLM model for processing.

{% hint style="warning" %}
Please note that this setting overrides the Image Recognition setting.
{% endhint %}

### Data storage

Here you can set the time period after which messages and dialogs will be deleted from all Savvi servers.

<figure><img src="https://2542240793-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnmK9dnkx224HgS0VSB5J%2Fuploads%2FsUjarz7NWyTR3OfWueNr%2Fimage.png?alt=media&amp;token=79fa4d17-257a-4eae-8a2b-5bd88c256bf0" alt=""><figcaption></figcaption></figure>

**Message storage (days)** — The storage period for dialog messages. After a specified period of time, all messages that exceed the specified time period will be deleted.

**Dialog  storage (days**) — the period after which dialogues will be deleted if no events have occurred in the dialogue during the selected period of time.

**Delete dialogs and message history** —  deleting all current dialogs (at the time of deletion activation) regardless of events in the dialog.

{% hint style="warning" %}
Please note that **by defaul**t, we store customer conversations for up to **90 days**. After that, messages and inactive conversations are deleted.

When integrating with MedFlex, the maximum data storage period is 7 days.
{% endhint %}