Privacy Policy

1. Information We Collect

• Account Data: For the Private Beta, access is strictly managed via email whitelisting. We collect your email address and basic profile information authenticated through our identity provider (Clerk). We do not perform automated ID verification or sanctions screening during the beta phase.
• Workflow & Document Data: We collect the text of natural-language instructions and Standard Operating Procedure (SOP) documents you upload to compile into Causal Structure Execution Framework (CSEF) graphs.
• Magellan Extension Data: When utilizing the Magellan Chrome extension, the system reads the necessary Document Object Model (DOM) data of the active webpage strictly required to execute the specific, user-approved workflow node. It does not passively track browser history or general web activity.

2. Zero Model Training & Third-Party LLMs

GIOS relies exclusively on the Gemini Enterprise Agent Platform (formerly Vertex AI) for natural language parsing and schema extraction.

• No Training: Your workflow data, SOPs, prompts, and execution outputs are never used to train, fine-tune, or improve our foundational models or Google's foundation models.
• GDPR Compliance: Our use of the Gemini Enterprise Agent Platform adheres to strict enterprise data privacy standards and zero-data-retention agreements for model training.

3. Security & Credential Vaulting

We employ a strictly decoupled architecture to ensure your third-party application credentials remain secure:

• No OAuth Storage: GIOS does not request, ingest, or store OAuth tokens for your connected enterprise applications (e.g., Slack, Zendesk).
• n8n Bridge Security: We utilize n8n exclusively as an isolated credential vault. GIOS only stores the specific n8n API key required to trigger your pre-configured webhooks.
• Encryption at Rest: Your n8n API keys are secured in our PostgreSQL database using Fernet encryption. The corresponding decryption keys are isolated and managed entirely within Google Cloud Secret Manager.

4. Data Residency & Infrastructure

During the Private Beta, all GIOS backend infrastructure, including our PostgreSQL databases and execution microservices, are hosted exclusively on Google Cloud Platform (GCP) servers located in the Singapore data center.

5. Your Data Rights

You maintain full ownership of the data you input into GIOS. You have the right to request access to, modification of, or complete deletion of your account, compiled workflow graphs, and immutable state-change logs at any time. To exercise these rights, please contact our support team.

6. Contact Us

If you have questions regarding this Privacy Policy, our data architecture, or the CSEF framework, please contact us at privacy@governedintelligence.com.