Research Privacy Issues

[miklb]

I think we need to understand any privacy concerns or expectations especially if we use a NLP API.

[golfoclock]

Was able to do some preliminary research. Most of these questions are from Talla's ebook. We'll eventually need to look into answering the following questions: Data Storage:

• [ ] How long is data stored?
• [ ] Where is data stored?
• [ ] Can message self-destruct?

Encryption:

• [ ] Are messages encrypted?
• [ ] Is data encrypted at rest?
• [ ] How are encryption keys managed?

Access:

• [ ] Under what conditions can admins/employees read users' interactions with the bot?
• [ ] Who at your organization has access to those interactions?
• [ ] What 3rd party services are used to deliver the chatbot, and what are their SLAs?

Service:

• [ ] Do you offer an SLA (service level agreement)?
• [ ] What happens if/when the bot goes down?
• [ ] How are users notified?
• [ ] How is chatbot availability managed?

Data brokerage:

• [ ] Is any data sold directly?
• [ ] Is any anonymized version of our data sold?
• [ ] Are any models trained on some derivative of our data sold?

Misc:

• [ ] Do we need/have the right certifications? (SSAE16, SOC2, HIIPA, etc.)

[golfoclock]

Facebook currently offers "secret coversations." https://www.facebook.com/help/messenger-app/1084673321594605?helpref=uf_permalink

However: "Secret conversations are currently only available in the Messenger app on iOS and Android, so they won't appear on Facebook chat or messenger.com."

Help Center