PepoChat

Thirteen prebuilt integrations create ready actions: order lookups in Shopify and WooCommerce, subscription reads and cancellation at period end in Stripe, ticket creation and status checks in Zendesk, Freshdesk, Zoho Desk and Salesforce, contact lookups and tickets in HubSpot, Jira issues, Slack and Discord alerts, Mailchimp subscriptions and Zap triggers.

Custom actions call any HTTPS endpoint with GET, POST, PUT, PATCH or DELETE, up to ten collected inputs and encrypted headers. Each action lists the response fields the model may read, and a Test control runs the real request before the action is enabled. A workspace holds up to 20 actions, and execution is at least once, so a rare retry can repeat a write.

Sourcepepochat.com/docs/integrations/overviewread 2026-10-26

At run time the agent picks the enabled action that fits a request from its when to use text, collects missing inputs from the visitor and chains dependent calls itself, as when an email lookup feeds a Stripe customer search and then a subscription check. Conversation statuses route a chat between the agent and the team. There is no builder for customer defined sequences, branches, conditions or retries; the order of steps comes from the model and the action descriptions rather than an editable flow.

Sourcepepochat.com/docs/integrations/striperead 2026-10-26

Knowledge comes from a whole site crawl counted as one source, uploaded PDF and Word files, text snippets and question and answer pairs, published help center articles, and pages synced from Notion and Google Drive, limited to the files and pages the operator shares.

Each reply retrieves the most relevant passages from that private store and writes from them; the agent does not browse the open web or answer from general knowledge about the business. When retrieval finds nothing, it says so and offers a person. Retrieved content is wrapped as untrusted data, so text planted in a page cannot redirect the agent.

Sourcepepochat.com/docs/knowledge-base/how-answers-workread 2026-10-26

Escalation fires on a request for a person, an accepted offer after a failed search, a tool or model failure, and an exhausted free allowance, and an escalated chat stops the agent until staff set it back to unresolved.

Destructive steps wait for the visitor: Stripe cancellation needs an explicit request and a confirmation, and only the visitor's own request can trigger a booking or an action. Operator instructions add refusals beneath base rules that keep grounding and handoff in force.

Staff do not approve individual actions before they run; tickets, alerts and lookups execute as soon as the agent calls them.

Sourcepepochat.com/docs/conversations/human-handoffread 2026-10-26

Integration keys, OAuth secrets, refresh tokens and custom header values are encrypted with AES-256-GCM and never shown again, and each workspace keeps its knowledge, conversations, contacts and credentials in separate namespaces. Members sign in with a verified email and password or with Google, with optional authenticator app codes and backup codes for two factor sign in.

Roles are owner, admin and member, and members can still manage integrations and billing; only owners and admins set retention. Outbound calls are HTTPS only, with private hosts blocked, redirects refused and responses capped. There is no single sign on or administrative audit log, and the company states it does not claim SOC 2, ISO 27001, a hosting region or a signed DPA template.

Sourcepepochat.com/docs/security/privacyread 2026-10-26

The team inbox shows each conversation live with its status, assignee, internal notes and the visitor's device, language and session details, and a CSV export carries transcripts labeled by visitor, agent and operator for a date range. Analytics adds satisfaction votes from resolved chats and AI labeled topics with weekly trends. Meeting memory reads are logged with the workspace and conversation. The record covers what was said; tool requests and responses do not appear as steps, and there are no charts of volume, resolution rate or reply usage.

Sourcepepochat.com/docs/conversations/team-inboxread 2026-10-26

A visitor session lasts 24 hours and extends while the visitor chats, so the conversation and the Messages tab carry over in that browser, and every conversation stays in the team inbox. For visitors who verify an email with a one time code, meeting memory retrieves dates, interests, commitments and summaries from earlier meetings recorded in PepoSmart, never raw transcripts, and only when the workspace switches it on. No separate memory of earlier chat conversations is described; recall beyond the session depends on that PepoSmart connection.

Sourcepepochat.com/docs/conversations/meeting-memoryread 2026-10-26

The service runs on a managed stack, with the backend on Convex, the dashboard and widget on Vercel and replies generated by OpenAI models. No hosting region is claimed, and there is no self hosted, private cloud or regional option. A script tag, WordPress plugin, React or Next.js snippet and hosted chat page change where visitors reach the agent, not where it runs. Allowed domains and blocked countries restrict where the widget may start a session.

Sourcepepochat.com/docs/security/privacyread 2026-10-26

Each prebuilt integration card walks through connecting the tool and adds ready actions such as order status, subscription status or ticket creation, with input formats already validated. A WordPress plugin installs the widget without code, and example instruction lines can be added with a click. The product ships one support agent configured from the customer's content; there are no named role agents, industry packs or reusable workflow templates beyond those action cards.

Sourcepepochat.com/docs/integrations/overviewread 2026-10-26

The agent wakes on a visitor message in the website widget or the hosted chat page and answers around the clock, with business hours shaping what it promises at handoff. A voice call and a phone number can appear in the widget, but voice runs on the customer's own Vapi assistant without the chat agent's knowledge or tools, and calls are not saved to the inbox. New lead notifications can email the team, post to Slack or call a webhook. There is no email, WhatsApp, social or messaging app channel, and no scheduled or inbound webhook trigger.

Sourcepepochat.com/docs/widget/voiceread 2026-10-26

Replies and topic labels use OpenAI models, and document extraction uses a vision capable model for scanned pages and images. The customer does not choose a provider or model, bring its own key or route tasks between models; tone and behavior are shaped through instructions instead.

Sourcepepochat.com/docs/knowledge-base/how-answers-workread 2026-10-26

Custom actions let the agent call a company's own HTTPS services with templated paths, bodies and encrypted headers. On the page, a four method script interface opens, hides, removes and reinitializes the widget, and the WordPress plugin offers filters that control where it renders. New leads can be pushed to a webhook. There is no REST or server API to send messages, manage knowledge or pull conversations, no SDK beyond install snippets, and no MCP server or client.

Sourcepepochat.com/docs/widget/behavior-and-apiread 2026-10-26

A Test the agent drawer runs the live widget with free replies kept out of analytics, while bookings and actions still execute for real. Every action card has a Test control that sends the real request with sample inputs and shows the status and response before the action is switched on. After launch, satisfaction votes and rising topics point to gaps in the content. There are no saved test sets, automatic scoring, model comparisons or regression checks.

Sourcepepochat.com/docs/widget/customizationread 2026-10-26

The agent works through retrieval and API actions. A site crawl reads pages into the knowledge base, and visitors can attach images that the agent reads, but nothing operates a browser or desktop on the agent's behalf, and work without an API path is handed to staff.

Sourcepepochat.com/docs/knowledge-base/how-answers-workread 2026-10-26