Security & Trust
Built For A Safer
Website Widget Experience.
Flidu helps visitors ask questions, choose contact actions, and submit details through a focused website widget experience — with source-aware answers, spam controls, secure submission handling, privacy-conscious analytics, and clear product boundaries.
Secure submissionsSource-aware answersSpam controlsPrivacy-conscious insights
Security That Matches The Product
Security that matches the widget experience.
Flidu is a website widget and AI assistant platform, so trust is practical: keep visitor interactions useful, keep setup controlled, limit abuse, protect submitted details, and keep Contact and Ask AI data organized by product line.
Visitor Interactions
Visitors ask questions, open Contact actions, and submit forms through the widget experience.
Source-Aware AI
Ask AI uses prepared website sources and Source Cards to give visitors useful answer context.
Submission Protection
Contact, Feedback, and Guided Form submissions use secure connections, server-side validation, spam controls, and field limits.
Focused Insights
Analytics focus on visitor questions, contact actions, source usage, content gaps, and channel performance — not invasive tracking.
Protect Visitor Submissions
Protect visitor submissions with clear controls.
Contact Form, Feedback Form, and Guided Form submissions move through concrete, dependable checks — from secure delivery to spam limits.
Submitted Over Secure Connections
Form data travels over secure connections between the widget and Flidu.
Validated Before Storage Or Delivery
Fields are validated server-side, and email fields are checked, before anything is stored or sent.
Sanitized Before Display
Text is sanitized, and header or script injection is guarded against.
Rate-Limited To Reduce Spam
Repeated submissions are rate-limited, and message length and request size are capped.
Workspace-Scoped Where Stored
Data Hub records, where enabled, stay workspace-scoped and product-line specific.
Retention-Aware Where Available
Where Data Hub is available, records are retention-aware so they do not linger by default.
Visitor forms do not accept file uploads. Visitors submit typed details, selections, and ratings only.
Source-Aware AI
Source-aware AI with safer boundaries.
Ask AI answers from prepared website sources, and Source Cards show visitor-friendly context. When an answer is not enough, visitors can switch to the Contact tab where Contact is set up.
Website Source Context
Ask AI is instructed to answer from the sources you prepare, and to say when it lacks source context.
Source Cards For Context
Source Cards show visitor-friendly context behind an answer.
Rate-Limited Public Questions
Public questions are rate-limited to keep the experience fair and lightweight.
Contact Fallback When Needed
When an answer is not enough, visitors can switch to the Contact tab where Contact is set up.
No Perfect-Answer Promise
Ask AI is helpful but not positioned as perfect — Source Cards let visitors open the source and check.
Reduce Spam And Abuse
Reduce spam and abuse without making the widget heavy.
Flidu keeps the visitor experience lightweight while limiting repeated submissions, oversized messages, and malformed requests.
Submission Rate Limits
Repeated submissions from the same visitor are limited.
Message Length Limits
Oversized messages and requests are capped before they reach storage.
Server-Side Checks
Submissions are validated on the server, not just in the browser.
Safe Fallback Messages
When something cannot load, the widget shows a simple, neutral message.
Website Origin Checks
Form submissions are checked against the website the widget belongs to.
Privacy-Conscious Analytics
Useful signals without invasive tracking.
Flidu analytics help businesses understand visitor intent — what visitors ask, which Contact actions they use, where content gaps appear, and which channels perform — kept focused and privacy-conscious.
1,932
Top Questions
6
Unanswered Questions
318
Contact Actions
Top 5
Source Pages
3 new
Content Gaps
263
Channel Clicks
Aggregate
Aggregated Country Insight
Scoped
Records
Sample numbers shown are example data. Insights are aggregated and focused on visitor intent — not individual visitor tracking or profiling.
Country-Level Visibility
Country-level visibility, not exact location tracking.
Where Country Targeting is used, it is country-level and Website Widgets-side. Contact can be shown or hidden by country-level rules where configured, and any country-level analytics stay aggregated.
Country Targeting follows Website Widgets access. AI Chatbot access does not unlock it.
Explore Targeting & VisibilityProduct Lines Stay Organized
Contact and Ask AI stay organized behind one widget.
Visitors can experience Contact only, Ask AI only, or both in one visitor-facing widget. Behind it, Contact follows Website Widgets rules and Ask AI follows AI Chatbot rules — keeping records, analytics, usage, and access organized.
Website Widgets
Contact Follows Website Widgets
Contact actions, channels, Contact-side records, and Website Widgets Analytics follow Website Widgets access.
AI Chatbot
Ask AI Follows AI Chatbot
Assistants, AI messages, sources, Source Cards, AI Analytics, and AI Data Hub follow AI Chatbot access.
Organized
One Visitor-Facing Widget
Contact only, Ask AI only, or both appear in one widget — with separate product logic keeping records, analytics, usage, and access organized.
One visitor-facing widget. Separate product logic behind it.
Workspace And Team Access
Keep access clear for your team.
Workspaces help organize websites, widgets, assistants, records, analytics, and team access. Team roles keep review and setup access clear for the people managing the account.
Explore Data Hub & AnalyticsReliable Widget Behavior
Fallbacks that stay helpful.
If Ask AI is temporarily unavailable, visitors can still use configured Contact actions. Public messages stay neutral and simple.
Ask AI temporarily unavailableA configured Contact action stays available where set up.
A question the sources do not coverAsk AI is instructed to say so, and the Contact tab stays available where set up.
Widget hidden by configurationNo confusing public explanation is shown.
Something cannot loadA simple, neutral temporary-unavailable message appears.
Good To Know
Practical trust pillars, at a glance.
Secure Submissions
Forms use secure connections, validation, sanitization, and spam controls.
Source-Aware Answers
Source Cards help visitors understand answer context.
Contact Fallback
Visitors can continue through configured Contact actions when an answer is not enough.
Privacy-Conscious Insight
Analytics focus on questions, actions, sources, and content gaps.
Country-Level Visibility
Country Targeting is country-level and aggregated where available.
Product Lines Stay Organized
Contact follows Website Widgets. Ask AI follows AI Chatbot.
Team Access
Workspace roles help keep setup and review access clear.
Focused By Design
Flidu stays focused on website questions, Contact actions, records, and visitor insights.
Passwordless Sign-In
Sign in with a one-time code sent to your email. Flidu accounts have no passwords.
Two-Factor Protection
Add an authenticator app as a second step, with recovery codes as a backup.
Sessions And Devices
See where you are signed in and sign out other sessions from your profile.
Verified Billing Events
Billing updates from the payment provider are signature-checked before Flidu acts on them.
What Does Security & Trust Mean For Flidu?
Flidu is a website widget and AI assistant platform, so trust is practical: keep visitor interactions useful, protect submitted details, limit abuse, and keep Contact and Ask AI data organized by product line. This page is a product trust overview, not legal terms.
How Are Form Submissions Protected?
Submissions travel over secure connections, are validated server-side, and are sanitized before display. Email fields are validated, and header or script injection is guarded against. Where Data Hub is enabled, records stay workspace-scoped and retention-aware.
How Does Flidu Reduce Spam Submissions?
Repeated submissions are rate-limited, and message length and request size are capped. Server-side checks run on every submission, not just in the browser.
How Does Ask AI Use Website Sources Safely?
Ask AI is instructed to answer from the sources you prepare, and Source Cards show visitors those sources where switched on. Public questions are rate-limited, and answers are not positioned as perfect.
What Do Source Cards Show Visitors?
Source Cards list up to three sources Ask AI looked at for the question, shown by title and linked to the page where there is one — not internal source processing.
What Happens When Ask AI Cannot Answer?
If Ask AI is unavailable, visitors see a neutral temporary-unavailable message. If the sources do not cover a question, Ask AI is instructed to say so. Where Contact is set up in the same widget, visitors can switch to the Contact tab for actions such as WhatsApp or a Contact Form.
How Does Flidu Keep Analytics Privacy-Conscious?
Analytics focus on visitor questions, contact actions, source usage, content gaps, and channel performance — not individual visitor tracking, replay, or profiling.
Does Flidu Show Exact Visitor Location?
No. Where Country Targeting is used, visibility stays country-level and any country insight is aggregated. Exact visitor location is not shown.
How Does Country-Level Visibility Work?
Country Targeting is Website Widgets-side and country-level. Contact can be shown or hidden by country-level rules where configured, and country analytics stay aggregated.
How Are Contact And Ask AI Data Organized?
Contact follows Website Widgets and Ask AI follows AI Chatbot. Even when both appear in one widget, records, analytics, usage, and access stay organized by product line.
How Do Team Roles Help With Account Access?
Workspaces organize websites, widgets, assistants, records, and analytics, and roles — Owner, Admin, and Viewer — keep setup and review access clear for your team.
How Do I Sign In To Flidu?
With a one-time code sent to your email. There are no passwords. You can add Two-Factor Protection with an authenticator app from your profile.
Does Flidu Expose Raw Source Setup To Visitors?
No. Ask AI answers from prepared sources, but internal source setup and processing are not exposed in the visitor experience.
Is The Demo The Same As A Saved Production Widget?
No. The demo uses example data to show the experience. A free account is needed to save, configure, and install your own widget.
Does Flidu Replace A Legal Privacy Policy?
No. This page is a product trust overview, not legal terms. Your own privacy policy and legal review still apply to your website.
Where Can I Ask Security Questions?
Reach the Flidu team through the Contact page. For detailed terms, see the Privacy and Terms pages.