Start with your website.
Add a small script and choose what your agent should know. It can answer from approved content without permission to read or change internal business records.
- Choose a name, appearance and company voice
- Supply approved company knowledge
- Keep back-office systems untouched
A public website agent has no inherent right to view private customer records or booking databases.