This page provides details on what data is collected , and how it is then stored, exposed, and transmitted between the eLearning chatbot user, the eLearning chatbot app, and Moodle.
Data collected
The Moodle eLearning Chatbot application collects information about the user , so the app can create a moodle Moodle user profile. This information includes the user’s name, telephone number, and other not non-required information such as messaging platform id ID (like whatsApp WhatsApp number or Facebook page scope idID), age, gender, organizational role, employee id ID, and extra details about the user’s place of work.
Data Privacy and Terms & Conditions
The Upon the startup flow, the chatbot includes on its startup flow a dialogue to collect acceptance of the Terms & Conditions, including data privacy, which the user must accept to be able to continue the conversation.
...
The application communicates with the Moodle API, making calls to Moodle’s standard endpoints , as well as and the custom endpoints that the Chatbot Plugin enables. The chatbot app uses a token generated in Moodle, and included as part of which is included in the chatbot installation.
Similarly, user’s inputs are posted by the communication service provider into the Chatbot plugin, which are followed by the chatbot prompts that , which are send sent via the security protocol dictated by the communication service provider.
| Info |
|---|
The current Communication Service Provider is Twilio. We plan to expand this to support Meta’s WhatsApp and Facebook Messenger directly by late 2023. |
Data in Transit
Moodle Chatbot App communicates with two external tools:
Moodle Platform.
Communication service provider (Twilio).
Moodle Platform: Moodle eLearning Chatbot App app relies on using Moodle’s API to display information such as course details and activity details. Moodle API requires access via an authorization token, which enables to use of specified functions from outside moodle Moodle without any credentials sharing. For more information, check Moodle’s documentation: https://docs.moodle.org/402/en/Using_web_services
Communication service provider (Twilio): Moodle Chatbot App requires a connection to receive/send messages in the chatbot client. This is done by using Twilio’s webhooks for incoming messages , and Twilio’s API for replies. Data exchanged with the communication service provider is always transferred as encrypted , via https (port 443). This communication service provider secures its information by checking both webhook the webhooks provided to Twilio and webhook the those used in Moodle Chatbot App. If both URLs match, then the data is procesedprocessed. For more information, check Twilio’s documentation: https://www.twilio.com/docs/usage/webhooks/webhooks-security
Data at rest
Moodle Plugin: the The plugin creates two custom tables in Moodle that are used to store the session log and an app log.
Session log: status of the conversation by of a user. Allows users to always come back return to continue the chatbot conversation in the same paints place after a session expires.
App log: log of all traffic, showing all user input as well as and content sent to the user.
Chatbot app: the The app requires to store information about storing user information’s last step/input in the chat. Chatbot App stores this information in the Session log table created by Moodle Plugin.