Privacy Policy: OptiChat

Privacy policy for OptiChat

OptiChat (“we”, “our”, or “the platform”) is engineered for enterprises requiring absolute data privacy, domain precision, and full sovereignty over internal knowledge systems. We operate under European data protection standards (GDPR / UK GDPR).

1. Enterprise data sovereignty and zero training

We guarantee that your proprietary document corpus, ingested manuals, employee queries, and AI-generated outputs are never used to train public foundation models or shared with unauthorized third parties. Your data remains strictly your intellectual property.

2. Corpus ingestion and vector index security

• Private indexing: When you ingest technical documents, PDFs, or internal wikis to build a specialist RAG chat, document chunks and vector embeddings are stored in dedicated, tenant-isolated vector databases.
• Encryption: All vector indices, raw text chunks, and metadata are encrypted at rest using AES-256 and in transit via TLS 1.3.

3. Local model execution and air-gapped deployments

OptiChat supports 100% on-premise execution using local inference engines (such as vLLM or Ollama):

• Zero network egress: In self-hosted or air-gapped deployment modes, zero data leaves your local network. Model inference, vector search, and neuro-symbolic validations execute entirely on your own hardware.
• BYOK cloud API option: If you choose to configure OptiChat with external cloud LLMs (e.g. OpenAI or Anthropic API), data transmissions occur directly between your instance and the designated provider. No data routes through 4DC Services servers.

4. LoRA adapter weights and fine-tuning datasets

Domain-specific training datasets, vocabulary lists, and compiled LoRA adapter weights for embeddings or generative models belong exclusively to your organization. They are stored securely in your private environment and are never commingled across tenants.

5. Neuro-symbolic validation and query telemetry

• Deterministic verification: Query verification logs generated by the neuro-symbolic constraint engine are stored in your private audit logs for regulatory traceability.
• Zero telemetry: We do not embed external usage trackers, telemetry beacons, or advertising cookies within OptiChat or its embeddable web components.

6. Data deletion and tenant isolation

You retain complete control over your knowledge indices:

• Index purging: You can delete individual document collections, LoRA weights, or entire chat workspaces at any time through the administration console.
• Permanent removal: Deletion immediately and irreversibly wipes all associated vector embeddings and text chunks from storage.

7. Contact information and compliance

For questions regarding enterprise data privacy, GDPR compliance, or data processing agreements (DPAs), contact:

4DC Services
Email: alex@4dc.services
Website: https://4dc.services