Privacy notice
GovComms.ai is a drafting assistant for public sector communications teams. This notice explains what we do with personal data when your organisation uses it.
Who is responsible
Your organisation decides what goes into GovComms.ai and what is done with the drafts it produces. In data protection terms your organisation is the controller, and White Label AI, which builds and runs the system, is the processor acting on its instructions. For questions about the material held in your organisation’s workspace, your own organisation is the right place to ask.
What we hold about you
If you have an account: your email address, your name if you gave one, your organisation, your role, and whether you have set up two factor authentication.
What you do in the system: a record of each draft you generate, each document you add, and each analysis you run, with the time and the action. This log is what lets your organisation show where a draft came from.
What you create: your drafts, and the documents your organisation uploads for the system to draw on.
Operational records: whether emails we sent you arrived, and what each generation cost.
What we do with it
We use it to run the service, to keep your organisation’s material separate from every other organisation’s, to show your organisation an accurate record of what was produced and from what, to keep the system secure, and to bill for it.
When you generate a draft, your instruction and the relevant parts of your organisation’s own documents are sent to Mistral, an AI company in France, which produces the text. Nothing else is sent anywhere. There is no advertising, no analytics, and no tracking. The system cannot publish anything.
Where it is held
In the European Union. The database is in Frankfurt and the AI provider is in France. One part of the system is still hosted outside the EU while we complete a move to European infrastructure, and this notice will be updated when that finishes.
How long we keep it
Retention periods are being agreed with your organisation and are not settled yet. This section will name the exact periods once they are, and this notice will say when it was last updated.
What is already true: when an account is deleted, the drafts and documents belonging to it are deleted with it. The record that actions took place is kept, without identifying who took them.
Your rights
You can ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted. A copy of everything held about you can be downloaded from your account page at any time, without asking anyone. For the rest, your organisation is the controller and is the right first point of contact.
If you are not satisfied, you can complain to the Data Protection Commission at dataprotection.ie.