GAS AIPrivacy & security
Menu
Ask your secretary

Plain-English data boundaries

You should know what a tool uses.

GAS tools do not all handle information in the same way. This page explains the current data path for the main public tools, without calling every feature “private” or “encrypted” when it is not.

See the data flows

What goes where

One platform, different data paths.

Read the description for the particular tool you are using. Do not enter passwords, payment-card information or private customer details unless a tool explicitly requires and protects them.

Marketing

Only the details you type are sent for a draft.

Your business description, offer, selected goal and optional audience are sent to the GAS AI Marketing service. A website address is treated as a hostname only; the tool does not browse it.

  1. You type the form details
  2. GAS requests one draft from OpenAI
  3. The draft appears in your browser for review
The request uses OpenAI's store: false setting. The tool does not post, spend money, connect an account or contact people.
Accounting

Selected files stay in your browser.

You choose files, review possible records and decide what belongs in a pack. A locked AES-256 ZIP is created in your browser for download to your device.

  1. You choose and review files
  2. Your browser makes the locked ZIP
  3. You use your own secure portal or device share method
Hosted temporary links are disabled until authenticated quotas and automatic deletion controls are verified.
Trading Lab

Price data and strategy testing stay in this browser session.

The synthetic example is built into the page. If you choose a CSV, the browser reads its Date and Close columns and runs the paper simulation locally.

  1. You use synthetic data or choose a CSV
  2. The browser runs validation and risk checks
  3. You review a simulated result
No CSV, broker credential, wallet key, market order or strategy result is sent to GAS, an AI provider, an exchange or an affiliate.
Planning tools

Plans stay on this device unless you export them.

Business Planner, Department, IT and Call Centre planning screens use browser storage for the plan you create. They do not connect a phone line, business system or staff account by themselves.

  1. You enter a plan
  2. The browser keeps it locally
  3. You decide whether to export or clear it
Anyone who can use the same unlocked browser profile may be able to see browser-stored information. Clear it when using a shared device.

Private Secretary data

Cloud media upload is closed until recovery is safe.

The signed-in studio may store profile preferences, explicit conversation drafts and redacted safety records in the Site database. New cloud file, voice and face uploads are disabled because recoverable key custody, scanning and safe download are not yet independently verified. Legacy protected items can be listed and deleted but not recovered or analysed.

Open export and deletion controls
  • ExportSigned-in users can download saved profile, conversation and safety data as JSON.
  • Full deletionThe studio can delete its saved profile, conversation, safety and legacy asset records and objects.
  • Retention boundaryNo automatic retention period is claimed; delete data when it is no longer needed or contact support for help.

GAS AI SECURE

Security planning starts with a smaller data boundary.

GAS AI SECURE currently provides a device-local readiness plan and source-linked security intelligence. It does not connect a camera, microphone, key, access-control system or live feed. Any future connection must be authorised, purpose-limited, access-controlled and separately disclosed.

Open GAS AI SECURE
  • Read-only firstFuture device connectors start with health, tamper and authorised event metadata—not unrestricted media.
  • Audio is off by defaultNo continuous recording, voiceprints or conversation transcription belongs in the default security path.
  • No autonomous physical actionGAS AI SECURE cannot lock doors, issue credentials or activate physical systems.

What we do not claim

Clear limits are part of good security.

GAS does not claim that ordinary email is end-to-end encrypted, that every tool has the same protection, or that a marketing draft is a professional decision. A full technical retention, data-residency and incident-response policy has not yet been published.

  • Use a secure channel when requiredEmail providers can still see addresses, subject lines and delivery information.
  • Keep full private links privateAnyone with a live full link may be able to open its locked pack.
  • Check before actingAI output can be wrong. Get qualified help for high-stakes decisions.

Your choice

Read the tool boundary before you start.

If a data path does not suit your business rules, do not use that tool for that information. You can ask a question before sharing anything.

Ask a privacy question Browse the tools