Sabriel AI

Sabriel AI puts a real AI assistant on your site, styled to look like it was built for your brand, not like a widget you bolted on.

You connect your own API key for Google Gemini, OpenAI or Anthropic Claude. The key is stored encrypted on your site (the System status page confirms that your server supports it) and is only ever sent to the provider you chose. There is no account to create, no service in the middle, and no data of yours passes through us.

What the assistant can do

• Answer questions about your business, using the details and the price list you enter in the settings
• Speak the language your visitor writes in, and switch mid-conversation if they do
• Read images your visitor attaches, and PDFs too when the engine you picked supports them
• Take voice messages: the visitor speaks instead of typing, and only the text reaches your site and the assistant. The speech is turned into text by the visitor’s own browser, which usually does it on its maker’s servers (Google for Chrome, Microsoft for Edge, Apple for Safari)
• Know your opening hours, and tell a visitor writing at 11pm that you are closed instead of letting them wait
• Give prices in your currency, with your VAT rate, your deposit and your installment terms, exactly as you set them
• Hand the conversation over to a person, with the message already written. The WhatsApp button carries a short briefing the assistant writes on the spot (who is writing, what they were asking, where the conversation had got to) falling back to their last three messages if the engine is slow. The email button opens a message with the conversation already transcribed inside it, trimmed if the chat was very long, because mail links have a length limit that is not ours. The phone button dials the number you set, if you set one
• Take a written message when nobody is available, from a box inside the chat itself: it reaches your inbox through your own site, without the visitor having to open their mail program
• Email the visitor a tidy summary of the conversation when they leave, and notify you at the same time
• Recognize a visitor who comes back from the same device, and pick up from what you already talked about

What you get in the admin panel

• A setup wizard that does the boring part. It reads your homepage with the AI you just connected and suggests a tagline and a tone of voice for your assistant. It also pulls your business name, website and email straight from WordPress, and your address from WooCommerce if you have it. You approve what you want and skip the rest.
• Seven ready-made tones (e-commerce, professional practice, salon, restaurant, medical practice, craftsperson, estate agency) as a starting point you then edit in your own words.
• A dashboard with visits, unique visitors, chats opened, daily average, blocked abuse attempts and your most visited pages, over the last 30 days. Counted on your own site, without cookies.
• A system status page that checks the things that actually break: whether your key is readable, whether the server can encrypt it, whether your site can send email at all. With a real test button for each.
• Export and import of the whole configuration, to move a finished setup onto the next site.

What you control

• Your brand. Logo, bot name and the widget’s main colors, with a live preview while you pick them. No credit of ours appears unless you choose to switch it on.
• Behavior and tone. A plain-text field where you tell the assistant how to talk and what your rules are: including the things that change from one day to the next: closed this evening for a private party, ten percent off this week, a dish that has run out. Whatever you write there, the assistant knows and says.
• Your price list. One row per service, with price and short description. The assistant quotes from it instead of inventing numbers.
• Opening hours, including shifts that cross midnight: the plugin splits them across the two days by itself.
• Currency and VAT, by country, with the rate filled in for you, and your deposit/balance structure.
• Links to your pages. The assistant cites them naturally when they are relevant, and never invents an address that does not exist.
• Anti-abuse limits. How many messages one visitor gets in 24 hours (a number you set, not one we impose) how many conversation summaries a single address can receive in an hour, and disposable email addresses turned away.

Nine languages, out of the box

Italian, English, Spanish, French, German, Portuguese, Dutch, Russian and Indonesian: for both the assistant and the admin panel, and they can be different from each other. There is also a single switch, «the bot speaks every language», that frees the assistant from your choice altogether: it then answers in whatever language each visitor writes in, whichever one that is.

Documentation inside the plugin

There is a full Documentation page in the admin menu, in all nine languages, with live previews that reflect your actual configuration. You can also export it as a single HTML file, in the language you pick, and publish it on your own site for your team.

A larger version exists

A paid edition adds, on top of everything above:

• Appointment booking inside the chat, on a calendar of its own, no Google Calendar, no Calendly, no third-party account. It knows your opening hours, how many people fit in each slot and the gap you want between one appointment and the next, and it will not double-book.
• Numbered PDF quotes with space for a signature, issued during the conversation, carrying your logo and your own terms and conditions.
• Lead scoring: every conversation is classified hot, warm or cold with a one-line reason, recalculated whenever the person writes again. Follow-up emails then go out on their own schedule, sent from your own site, each carrying an unsubscribe link, and they stop by themselves as soon as the person has an appointment booked.
• A free website check the assistant can run for a visitor and hand back as a report: built for web agencies, it looks at what is publicly visible (speed, mobile rendering, headings and metadata, images, security headers, broken links and more) and turns it into a conversation starter instead of a cold quote.
• Portfolio and products inside the chat, from wherever you already keep them: WooCommerce, a page of your own, a list you write by hand, your blog, or the portfolio your theme already provides. No rebuilding of a catalog you have built once already.
• Knowledge of your site’s pages, so the assistant answers from what is actually written on them: nothing to embed, no external index, no snippet to paste anywhere. It reads the pages you select, writes its own summary of each, and that summary is yours to correct.
• Client management dashboard: appointments, quotes, checks, analytics and consents in one place.
• Recoverable history: a visitor keeps the conversation moving from phone to laptop.
• Mailchimp synchronization with double opt-in.
• Wider anti-abuse limits, and far more room for customization: over thirty colors and nine font families.
• Native GDPR tools. Appointments and quotes plug straight into WordPress’s own Export Personal Data and Erase Personal Data tools, so a visitor’s “send me my data” or “delete me” request is one click, not a manual database search. Appointments and quotes are anonymized rather than deleted outright, since many countries require you to keep financial records; conversations are deleted in full.
• Site hardening, in one panel. Nine switches (disable XML-RPC, hide the WordPress version, block user enumeration, limit login attempts, security headers, disable the file editor, hide your readme.txt, hide or move your login page) so you are not installing a second plugin just to close the basics.

Nothing here is locked. The paid edition is a separate plugin, not a key that unlocks code you already downloaded: none of the features listed above ship inside this one.

It is not required and this plugin does not nag you about it: everything described above works on its own, for everyone, forever. Details are on a single page inside the plugin, and at https://sabrielagency.com/sabriel-ai-en/

External services

This plugin connects to one external service, the AI provider you choose and configure. Nothing is sent to an AI provider until you save an API key for it, and only the provider selected as active is used (“Test this key” contacts the provider whose key you are testing).

The AI provider you choose. The plugin calls the provider’s API over HTTPS with your own API key:

• Google Gemini (generativelanguage.googleapis.com): terms https://ai.google.dev/gemini-api/terms | privacy https://policies.google.com/privacy
• OpenAI (api.openai.com): terms https://openai.com/policies/ | privacy https://openai.com/policies/privacy-policy
• Anthropic Claude (api.anthropic.com): terms https://www.anthropic.com/legal/commercial-terms | privacy https://www.anthropic.com/legal/privacy

What is sent, and when:

• With each chat message: the conversation so far (the visitor’s messages, the first name used in the greeting, the assistant’s replies, any attached image or PDF), the business information you entered (business details, price list, opening hours, page links, tone instructions), the current date and time and, for a visitor returning on the same device, a short excerpt of their earlier messages kept in their own browser (about 1,200 characters at most).
• When the chat shows the card to contact a person: the conversation and the visitor’s full name, to write the short summary that goes into the WhatsApp message.
• When you press “Read my site with AI” in the setup wizard: the visible text of your homepage (the first 3,000 characters).
• When you press “Test this key”: a fixed one-word test message, with no visitor or business data.

How the provider uses and keeps this data is decided by its own terms, linked above.

Voice input (only if a visitor uses the microphone). Speech is turned into text by the visitor’s own browser through the standard Web Speech API, not by this plugin. Most browsers send the audio to their maker’s speech service (Google for Chrome, Microsoft for Edge, Apple for Safari). Only the resulting text reaches your site and the AI provider.

WhatsApp (only if you set a number and the visitor taps the button). The button opens wa.me with a message already written: the visitor’s name, email and phone if given, and a short summary of the chat. Nothing reaches WhatsApp unless the visitor sends it. Terms https://www.whatsapp.com/legal/terms-of-service | privacy https://www.whatsapp.com/legal/privacy-policy

The plugin never contacts any server belonging to Sabriel Agency on its own, and collects no usage statistics.

Reporting a problem (optional). The System status page has a form that emails a bug report to the plugin author ([email protected]) through your site’s own mail system: what you write, your reply address, an optional screenshot, your site address and the technical summary of the installation (versions, a few environment checks, the administrator email, the plugin configuration, the visit counters of the last 7 days and the last email error, with addresses masked). API keys are never included. Nothing is sent unless you fill in the form, tick the confirmation box and submit it.

Privacy

What leaves your site, and where it goes. Only what is listed under External services above: the requests to the AI provider you selected, made with your API key and handled under that provider’s own terms and, only if a visitor uses them, the browser’s own voice recognition and the WhatsApp button. Your site never receives a visitor’s audio and the plugin stores none of it.

Visit statistics and abuse protection. The widget builds a short code from nine characteristics of the visitor’s browser: the way the browser identifies itself, its language, the screen size and color depth, the time zone, the number of processor cores, the platform, whether cookies are enabled and how many plugins it reports. No cookie is written, the code never leaves your site and it cannot be turned back into those characteristics. It is used in two ways. For the visit statistics, a version of it that changes every day is sent to your site with the page address and kept for 90 days with the visit counts: you can switch this off in Settings → Limits, and the chat works exactly the same either way. For the anti-abuse limits, the code is sent to your site with every chat message and with each check on the daily limit, so that the daily message cap can also be counted per device: this happens whether the statistics are on or off, and the site keeps the code only in scrambled form, inside counters that expire after 24 hours. In the EU, reading those characteristics counts as accessing the visitor’s device: mention both uses in your privacy notice, and ask for consent where the law requires it.

What stays on your site. The visit counters are stored in your own WordPress database. The name, email and past conversations a visitor types into the chat stay in that visitor’s own browser and are not saved in your database: the only trace is a scrambled (hashed) form of the email address, the network address and the device code, inside the anti-abuse counters (they expire after one hour or 24 hours) and inside the permission to email the chat summary (it expires after 30 days). The assistant recognizes someone returning on the same device because the browser tells it, not because the site kept a record. Nothing is sent to Sabriel Agency.

Emails. The conversation summary is sent to the visitor’s own address and to the address you configured, through your site’s normal mail system.

Removing everything. Deleting the plugin from the Plugins screen removes its settings, its visit counters and its scheduled tasks. Anything belonging to your customers is only removed if you first switch on “Also delete customer data” in Settings: it is off by default, so uninstalling in order to reinstall never loses anything. It also clears leftover data from the paid edition, if the site ever ran it.