// privacy
What we collect, and what we don't
This policy covers etioworks.com and the incident-triage demo on it. It describes what the site actually does, in plain language.
Last updated: 15 September 2026
1. Creating an account for the demo
Running an analysis in the demo requires a free account. There are two ways to create one:
- Name and email. We store the name and email address you type. We do not verify the address and we do not ask for a password.
- Sign in with Google. Google sends us your name, your email address, whether Google has verified that address, and your Google account identifier. We never receive your Google password, and we get no access to your Gmail, Drive, contacts or any other Google service.
We use this to give you access to the demo and to follow up with you about EtioWorks. We do not sell it, rent it, or share it for advertising.
2. What you submit to the demo
The demo analyses log files or text that you paste or upload. Here is what happens to it:
- Personal data found in your submission — such as email addresses, phone numbers and card fragments — is replaced with placeholders such as
[EMAIL_01]before the text reaches the language model. The model never sees the original values; they are restored only in the copy shown back to you. - The analysis is produced by Google's Gemini API. The pseudonymised text is sent to Google for that purpose.
- Analyses are stored in Google Cloud Storage, on servers in the United States. The copies that can contain personal data are encrypted at rest.
- Everything from an analysis is deleted automatically after 30 days.
Please don't paste real secrets. This is a public demo, not a private deployment. Don't upload passwords, API keys, customer records or anything else you would not want leaving your organisation. Redaction is thorough, but a demo is the wrong place to test it with live production data.
3. Technical information
- IP address. Used to rate-limit the demo so it cannot be abused, and recorded in ordinary server logs.
- Browser storage. After you create an account we store a sign-in token in your browser's local storage (
etio.pass), along with your name (etio.name), so you are not asked to sign in again on every visit. The token expires after 30 days. We use no advertising cookies and no analytics or tracking scripts.
4. Who processes data on our behalf
- Google Cloud — hosting, file storage and the database holding accounts (Cloud Run, Cloud Storage, Firestore), in the United States.
- Google Gemini API — generates the analysis from your pseudonymised text.
- Cloudflare — serves this website.
- Google Fonts and Google Sign-In — loaded directly from Google's servers, which means Google receives your IP address when the page loads them.
5. How long we keep things
- Analyses and any files you submitted: deleted automatically 30 days after the run.
- Your account details: kept until you ask us to delete them.
6. Your choices
Email anshusingh2000.as@gmail.com and we will send you a copy of what we hold about you, correct it, or delete it. There is no marketing list to unsubscribe from; if we contact you and you would rather we didn't, say so and we'll stop. You can sign yourself out at any time by clearing your browser's storage for this site.
7. Security
Personal data is removed from submissions before the model sees them, sensitive stored copies are encrypted at rest, and the demo has no write access to any system of yours — it reads what you give it and proposes actions, it never performs them.
8. Changes
If this policy changes, the date at the top changes with it.
9. Contact
Questions about this policy, or about anything we hold: anshusingh2000.as@gmail.com.