Privacy & coverage

Understand what a signal means before acting on it.

Content stays out of telemetry

Supported prompt text is inspected locally in the browser. The telemetry boundary admits category indicators, coarse counts, versions and sensor health. It does not admit raw prompts, file contents or filenames. File signals describe count and type groups; file bytes are not inspected.

Metadata still needs care

Installation references, activity times and category indicators are organizational data. Account identity is used for access and installation binding. Pseudonymous installation numbers are not proof of a physical device or of the person who used it.

Workspace membership determines access. Owners manage approvals and controls; viewers cannot perform those actions. The organization must define who may access the service and how participants are informed.

Observation has limits

Missing telemetry does not prove nonuse. First contact alone does not prove readiness. Category findings are indicators, not confirmation that a secret was exposed. Shadow AI does not establish account management, employee productivity or complete AI usage.

The configured ChatGPT candidate observes supported ChatGPT Web composer attempts and coarse file selections after explicit approval and activation. Unconfigured review builds cannot connect; the separate Personal Lab keeps its results locally. Live page compatibility and managed deployment must be verified for the installed package before an organizational pilot. Observation is designed to leave ordinary submission usable; it is not an enforcement or blocking system.

Before participating

Ask your organization for the approved participant notice, purpose, support contact, data region, retention and deletion process. This product guide does not replace that notice. Operational backup, deletion and access procedures must be verified in the selected environment.

You can sign out of the extension to clear its local session. Signing out is not a request to erase previously accepted metadata; contact the designated operator for deletion requests.