How to protect chatbot data and user privacy