Recently I was poking at arc browser. While my impressions of the browser are out of the scope of this question, their initial set up included an opt in set of AI features, and a rather thoughtful privacy page. I'll include a partial screenshot below should their page go down or change
I'm not enough of a privacy expert to say if this is a gold standard but as a potential end user - this seems very user centric, and clear
It includes what the feature is, what, when and why it's processed and by who and where data is processed. Considering the political climate we live in, there may be certain countries we wouldn't want our data going to, and having the information to make that determination would be nice. In terms of Teams, there might also be clients who may have restrictions on what/where their data can go.
Stack Overflow Inc. seems to be fairly determined to try to include generative AI in various products, both public platform wise, and on Teams. While I don't believe that it's the best path forward, it seems like a fair thing to ask on where our data is going and why.
I think of a few specific points to consider
documenting data flows for features the company intends to include in public Q&A. I'd note with some proposals, data may be sent before any forms of submissions
Teams has an optional AI feature. Considering this data is private, knowing what's going where might be reassuring to potential customers, especially considering potential regulatory issues
OverflowAPI might be tricky. At the very least, treating it as a subprocessor may be good. That said, considering SE is very vocal about these deals, I'd find it surprising if their customers are secret.
So, if the company is going to go forward on selling/using our data for/on AI, could we have some clarity on where it's going and why?
