Privacy Policy

Architecture: Your Data Stays With You

Interpretos Local is a Docker container that runs on your servers. When you ask a question:

• The query is processed locally by the Interpretos engine
• API calls are made directly from your server to your enterprise applications (Oracle EBS, PeopleSoft, Maximo)
• The AI language model processes the query — see "AI Provider" below
• The response is returned to your browser

No enterprise data passes through Interpretos servers. We have no access to your systems.

AI Provider Data Handling

Interpretos Local uses a third-party AI language model (Google Gemini, OpenAI, or Anthropic — your choice) to interpret queries and generate code. When a query is processed:

• The query text and relevant context are sent to the AI provider
• The AI provider returns generated code, which runs locally on your server
• Enterprise data retrieved from your systems is formatted locally — it is not sent to the AI provider

Each AI provider has its own data handling policies. We recommend reviewing them:

• Google Gemini API — Google does not use API data for training
• OpenAI API — API data is not used for training by default
• Anthropic API — API data is not used for training

What We Collect (Optional Telemetry)

When telemetry is enabled, the following anonymous data is sent daily:

• Random instance UUID (not tied to your organization)
• Software version
• Count of distinct users (hashed, not identifiable)
• Query count per day
• Which modules were queried (e.g., PO, INV, AP)
• Average response time and success rate

What We Do NOT Collect

• Query text or content
• Database records or enterprise data
• IP addresses or hostnames
• Usernames, passwords, or credentials
• Organization name or identifying information

Credential Storage

Credentials you provide during setup (API keys, database connection strings) are stored locally in the Docker volume on your server. They are:

• Encrypted at rest using AES-256
• Never transmitted outside your network
• Accessible only to the admin user

Audit Logging

All queries are logged locally with timestamp, username, and query text. Audit logs are stored in the Docker volume and accessible to admin users via the Admin Panel. Logs are never sent externally.

Opt Out of Telemetry

Telemetry is disabled by default. If you enable it during setup, you can disable it at any time from the Admin Panel > Settings tab, or by setting CDDI_TELEMETRY=false in your environment.

Data Retention

If telemetry is enabled, anonymous heartbeat data is retained for 12 months, then deleted. Your local data (queries, audit logs, credentials) is retained as long as the Docker volume exists.

GDPR

The telemetry data collected is anonymous and does not constitute personal data under GDPR. No individual can be identified from it. Your enterprise data remains on your infrastructure and is governed by your own data protection policies.

Contact

For privacy questions: privacy@interpretos.com