Q: Hi can you please elaborate on the security of user’s data.

Somewhere it reads: We keep your chat history to help you get back to past conversations. Your chats are stored only on your device and will be automatically deleted after 30 days.

”We keep your chat history “ - Is that just a bad choice of verbiage?

In a reply to to me to an earlier question you basically stated that the user data has to flow through Voila’s system. - That statement has me very concerned!

I’m very concerned about security.

1. In which countries and servers (AWS) is the user data routed through that Voila has access to?

2. Which encryption protocols do you have in place .

3. What is the user’s data-flow when using Voila?

4. In which parts of the data-flow is the data encrypted and in which flows is the data not encrypted to-be able for your/ Voila’s system to interfere with the Chatgpt output or users prompt? Fine tuning, Prompt engineering - I don’t know what your system does.

5. I especially am concerned in relation to Voila creating a Gmail replay. - That is my main use case. How and where is the data - my email conversation partners data analysed and / or processed? - Only ChatGPT or at VOILA too?

I would appreciate some detailed FAQ’s on your website explaining the security measures you have taken and what Voila actually does in the background with user’s data.

Thank you.

NeuralNomadDec 1, 2023
Founder Team
Michal_Voilá

Michal_Voilá

May 14, 2024

A: Hi there,

Thank you for your questions. I understand your concerns, and I'm happy to address any questions related to the security or privacy of your data. Voilà is, in fact, very privacy-focused, as explained on our help page here: https://www.getvoila.ai/help.

Your content and AI conversations are never stored on our servers or used for training the AI. We only keep information about the time and date of your request and the number of tokens used to process it. When processing your requests, we act as a proxy between you and OpenAI. Additionally, we have signed a separate Data Processing Addendum with OpenAI, which further enhances the privacy and security of your data. The data you send to OpenAI is handled according to the same rules as OpenAI's Enterprise API access.

Voilà does not transmit the history of your chats – they never leave your computer and remain only in your browser.

Now, let me address your questions individually:

1. To provide fast and reliable access to our services, we use a global, distributed network for web request routing known as the Edge network. All information transmitted through this network is encrypted using the latest security standards.
2. All communication between your browser, Voilà, and OpenAI is encrypted with the latest version of TLS (1.3). We have also implemented several layers of security in our infrastructure to guarantee the safety and integrity of our services, such as Web Application Firewall or Bot protection.
3. When you submit a request in your browser, it is sent to our server. Our infrastructure then forwards the request to OpenAI for processing and returns the result to your browser.
4. Our servers do not semantically analyze your content or store any of your prompts. In certain cases, for example, if you use one of our predefined actions (e.g., "Write a blog post"), we do provide additional instructions to the language model at OpenAI to ensure the best possible output quality, but we do not alter your prompt.
5. As I explained above, your information travels through our servers to OpenAI. However, we do not store or keep logs or any other traces of the content of your requests.

I hope this answers your questions. Please let me know if you have any other questions.

Best,
Michal

Share
Helpful?
Log in to join the conversation
Verified Purchaser badge

Verified purchaser

Posted: Dec 1, 2023

Thank's a ton , Machal! Much appreciated!