If MolBot is replying to customers automatically, what is your data accountability plan—exactly what user data/conversation content does it collect, where is it stored, how long is it retained, who can access it, and how will you prove compliance (and handle deletion requests) if a user asks for their data to be removed?