The privacy policy needs to be cristal clear what they do and what they don't with the chat data. How long is it kept, what is it being used for, who has access to it, etc.
Ideally there are no chat logs being kept at all and chat logs are only enabled temporarily for an individual user when debugging issues.
Ideally there are no chat logs being kept at all and chat logs are only enabled temporarily for an individual user when debugging issues.