Better Headers vs HR RAG Chatbot

This plugin does not make any changes to your server configuration, such as the .htaccess file, but instead sends the headers as part of the WordPress page response. The reason for this is that many of them are not valid for assets such as stylesheets and images, but are sent anyway if the server configuration method is used. Unlike many security plugins, these headers are also sent for your admin panel, where security is arguably the most important. Headers that can be set include… * Feature-Policy * Referrer-Policy * Strict-Transport-Security * X-Frame-Options * X-Content-Type-Options * X-XSS-Protection * X-Permitted-Cross-Domain-Policies * Expect-CT

HR RAG Chatbot helps employees get instant answers to HR policy questions using advanced AI technology. The plugin uses Retrieval Augmented Generation (RAG) to provide accurate, context-aware responses based on your company’s HR policies. Features: * Multiple LLM support (Google Gemini API, OpenAI API) * Document indexing and chunking * Employee context awareness * Chat history logging * Gutenberg block and shortcode support Third-Party Services: This plugin integrates with Google Gemini API and OpenAI API. These are third-party services and their use is subject to their respective terms of service and privacy policies. The plugin does not include or bundle these services – you must obtain your own API keys from the service providers. External Services & Data Usage This plugin connects to external AI services to generate responses. Please review the following information about data usage and privacy. Services Used: Google Gemini API (if configured) Used for: Generating AI responses to user questions Data sent: User questions, HR policy document excerpts, employee context (designation, grade, etc.) Privacy Policy: https://policies.google.com/privacy Terms of Service: https://policies.google.com/terms OpenAI API (if configured) Used for: Generating AI responses to user questions Data sent: User questions, HR policy document excerpts, employee context (designation, grade, etc.) Privacy Policy: https://openai.com/privacy Terms of Service: https://openai.com/terms What Data Is Transmitted: * User’s question text * Relevant HR policy document chunks (retrieved from your local database) * Employee profile information (if configured: designation, grade, department, location, years of service) * System prompts and model parameters Important Privacy Notes: * Data is transmitted only when generating responses to user questions * No data is permanently stored by external AI providers for training purposes (per their policies) * All HR policy documents are stored locally in your WordPress database * You control what data is indexed and made available to the chatbot Local WordPress Storage: The plugin stores the following data in your WordPress database: * Option name: hr_rag_options – Plugin settings including API keys * Database tables: wp_hr_rag_docs, wp_hr_rag_chunks, wp_hr_rag_chats * Transients: hr_rag_context_{session_id} – Temporary employee context (expires after 1 hour) * Chat logs: Questions, answers, and context used for each conversation Data Control: You have full control over your data: * Delete API keys anytime from plugin settings * Clear all indexed documents using “Delete” buttons in Knowledge Base * Remove all chat logs from the database * Uninstall plugin to remove all data (see Uninstallation section) * No data is sent to external services without your API keys configured Developer Contact: For questions about this plugin’s data handling, visit: https://faststeptech.com/contact/ Third-Party Service Attribution This plugin uses the following third-party services: Google Gemini API – AI language model service by Google OpenAI API – AI language model service by OpenAI These services are not included with the plugin. Users must register and obtain API keys independently from the respective service providers. Use of these services is subject to their terms of service and privacy policies. Uninstallation When you uninstall this plugin: 1. All plugin options (hr_rag_options) are removed 2. All database tables (wp_hr_rag_docs, wp_hr_rag_chunks, wp_hr_rag_chats) are deleted 3. All transients are cleared 4. No data remains in your WordPress installation