PoliPilot: Your Security & Privacy
Understanding how PoliPilot protects your information and operates securely, including notes on AI provider data usage.

Our Commitment to Your Privacy

PoliPilot is designed with your privacy and data security as a top priority. We believe in transparency and empowering you with control over your information. This application operates on a privacy-first model.

How PoliPilot Handles Your Data

  • User-Provided API Key: You must provide your own API key for the AI provider (e.g., Google AI). PoliPilot uses this key to make requests to the AI model on your behalf for the current session only. Your API key is transmitted directly to the AI provider for authentication and is never stored by PoliPilot application servers or logged permanently by this tool.
  • Documentation URLs, Files & Customer Messages: The documentation URLs, file contents, and customer messages you input are sent to the AI model (via your API key during your session) to generate a relevant response. This information is processed to fulfill your request and is not stored by PoliPilot.
  • Generated Replies: The replies generated by the AI are displayed to you in your browser. PoliPilot does not store these replies.
  • No Long-Term Data Storage by PoliPilot: PoliPilot acts as a frontend tool. It facilitates interaction between your browser, your documentation, and the AI model using your API key. It does not maintain a database of your inputs (URLs, messages, API keys) or generated content beyond your active browser session with the tool.
  • Session-Based Operation: All data you provide is used only for the duration of your active session in the browser. When you use the "Clear Session" button or close your browser tab, this information is discarded from the application's frontend state.

AI Model Provider Data Usage (e.g., Google Gemini)

PoliPilot uses your provided API key to send your documentation content and customer messages to the selected AI model provider (e.g., Google for Gemini models).

Regarding whether this data is used to train the AI provider's models:

  • For many enterprise-grade APIs, including those from providers like Google when using an API key for Gemini models, a key aspect of their terms of service is that data sent via the API is generally NOT used to train the provider's general large language models. Instead, your data is typically used solely to generate the response for your specific request and for other purposes explicitly outlined in their terms.
  • However, AI provider policies can evolve. It is crucial to always refer to the official terms of service and data usage policies of the specific AI provider (e.g., Google) whose API key you are using. PoliPilot itself does not control how the AI provider handles data sent to their API.
  • PoliPilot does not share your API key or your data with any other third parties besides the AI provider you select through your API key.

You are responsible for understanding and agreeing to the terms of the AI provider you choose to use with PoliPilot. Always review their latest documentation on data privacy and usage.

What This Means for You

  • You Control Your API Key: You are in full control of your AI provider API key, its usage permissions, and any associated costs or rate limits.
  • No Hidden Data Collection by PoliPilot: This tool does not collect or store your sensitive information or conversation data.
  • Direct Interaction Model: The core processing involving your data and the AI model happens under the authority of your API key with the AI provider.

Transparency Through Citations

PoliPilot includes a citation feature, listing the source URLs used by the AI to formulate its response. This promotes transparency and allows you to verify the information's origin directly from your provided documentation.

PoliPilot is designed to be a helpful tool that respects your privacy by operating with the data you provide, for the session you initiate. For more details on the application's architecture, please refer to the project's source code.