No sensitive or personal customer data is required. For website integration, the client would either need to grant temporary access to their website (e.g., admin or developer access) or have their developer place a small embed script/snippet for the chatbot. The level of access depends on how hands-on they want us to be. On the AI side, they only need to provide API credentials (such as Retell and model keys), which can be restricted, rotated, or revoked at any time. We don’t need access to user passwords, payment details, or private customer information. GPT-4.1 is a solid choice and aligns well with performance and reliability for conversational use cases.