Privacy Policy
This policy covers the EKOS website (ekos.dev) and the EKOS public demo: the EKOS console and the Superset dashboards hosted for it on Microsoft Azure, which you reach by signing in with GitHub or Google. EKOS is an open-source project; the demo is run by its maintainer for people to try it. The software you can install yourself from GitHub collects nothing and sends nothing to us.
What we collect, and why
| Data | Where it comes from | Why |
|---|---|---|
| Your sign-in name: your GitHub username, or your Google e-mail address, plus the provider's ID for your account | GitHub or Google, when you sign in. We ask Google only for the basic scopes (openid, email, profile); we never see your password. |
To know who you are across visits, apply your daily limits, and record who did what. |
| The time of your sign-in and of each request | The demo itself | Security logs and daily limits. |
| The questions you type and the answers (SQL, charts, dashboards you create) | You | To answer them. Questions are sent to our model provider (below) to be turned into a query and checked for abuse. Dashboards you create are saved in the demo and can be seen by other demo users. |
| Usage counters (how many questions you asked today) | The demo | To enforce the published limits (5 questions per person per day). |
| Your IP address | Your browser's connection | Rate limiting and temporary blocks after abuse (see the Terms of Service). |
| Refused requests: a short excerpt (at most 200 characters) of the text that was refused, the reason, your sign-in name and IP address | The demo's safety checks | So the maintainer can review bans and lift mistaken ones. |
| Website server logs: IP address, time, page requested, browser type | The ekos.dev web server | Operating and securing the website. |
We do not use advertising, tracking pixels or analytics services, and we do not sell or rent personal data to anyone.
Cookies
The demo sets only the cookies needed to keep you signed in: a session cookie from Azure Container Apps' sign-in, and Superset's own session cookie. They are not used for tracking or advertising. The ekos.dev website sets no cookies; it loads fonts from Google Fonts, which receives your IP address when your browser fetches them.
Who else processes your data
- Microsoft Azure hosts the demo and its databases, in the North Europe (Ireland) region.
- GitHub and Google sign you in, under their own privacy policies.
- Anthropic provides the AI model that writes SQL for your questions and checks requests for abuse. It receives the text of your question, the names and descriptions of database tables and columns, and, when the query writer checks a spelling or a result, a few values from the fictional sample data. It never receives your sign-in name.
The data in the demo
The business data you query is the iDempiere GardenWorld sample company, which is fictional. Please do not type personal or confidential information into questions.
How long we keep it
Account records, dashboards and logs are kept while the demo runs, and are deleted when it is shut down. Daily usage counters are only meaningful for one day. You can ask for your data to be deleted at any time.
Your rights
You can ask what we hold about you, ask us to correct or delete it, or object to its use. We will delete your account record, your dashboards and the logs that name you, except where we must keep a record of a ban to prevent abuse. Where data protection law such as the GDPR applies, you also have the right to complain to your data protection authority. Signing in is optional; the website itself needs no account.
Children
The demo is not directed at children under 16, and we do not knowingly collect their data.
Contact
E-mail inbox@alexeybanaev.cloud for any privacy question or request, including access and deletion. You can also open an issue at github.com/alexeyban/EKOS/issues — but leave personal details out of a public issue.
Changes
If this policy changes, the new version is published here with a new date.
See also the Terms of Service.