DevOpsFix Privacy Policy

1. Overview & Architecture

At DevOpsFix, we recognize that your cloud infrastructure code, terminal outputs, Kubernetes manifests, and incident logs contain highly sensitive operational intelligence.

DevOpsFix is designed from the ground up on a privacy-first, client-driven architecture. Whether you are using guest mode or an authenticated account, our core principle is simple: your operational data and private API keys belong to you, and we never use your inputs to train foundational AI models.

2. Information We Collect vs. What We Never Collect

We maintain strict boundaries between necessary application metadata and your private infrastructure data:

3. Guest Sessions & Local Storage Management

DevOpsFix provides a frictionless Guest Mode so developers and SREs can immediately troubleshoot errors and generate infrastructure scripts without creating an account:

• 100% Client-Side Local Storage: For guest sessions, all conversation history, prompt inputs, error logs, and AI responses are stored exclusively in your browser's localStorage and sessionStorage.
• Zero Central Database Persistence: Guest diagnostic sessions are never stored, logged, or retained on our backend servers or databases.
• Complete User Deletion Control: You have absolute control over your local data. Clicking "Clear Chat" in the workspace or clearing your browser cookies/storage instantly purges all guest records from your machine.
• No Third-Party Trackers: Guest mode operates without tracking pixels, advertising beacons, or cross-site fingerprinting scripts.

4. Bring-Your-Own-Key (BYOK) & Client-Side Encryption

When you connect custom API keys for external AI providers (OpenAI, Anthropic Claude, Google Gemini, Groq, DeepSeek, or OpenRouter):

• Encrypted in Browser: Your API keys are encrypted client-side using industry-standard AES-256-GCM encryption before storing in local browser memory.
• No Database Persistence: Your third-party API keys are never stored in plaintext on our backend databases.
• Direct Gateway Transmission: When making diagnostic requests, your key is passed securely over TLS 1.3 only to authenticate the specific request with your chosen provider.

5. Zero AI Model Training Guarantee

We do NOT use your infrastructure code, logs, stack traces, or chat prompts to train or fine-tune public, commercial, or proprietary AI foundational models.

All prompt reasoning requests sent through the DevOpsFix gateway are processed statelessly in ephemeral memory and discarded immediately once the diagnostic response stream finishes.

6. Air-Gapped Local LLMs (Ollama)

For high-security enterprise environments, air-gapped workstations, and regulated industries:

• 100% Local Execution: DevOpsFix supports direct integration with self-hosted Ollama endpoints (e.g. http://localhost:11434).
• Zero Internet Transmission: When using local models, 100% of reasoning computation executes entirely inside your private machine. Zero bytes of logs or diagnostic prompts leave your local environment.

7. Support Desk & Ticketing Data

When you submit a support inquiry through the DevOpsFix Contact desk:

• Ticket Generation: Each inquiry is assigned a unique reference number (e.g. TCK-000001) and pure UUID to track investigation and resolution progress.
• Access Restriction: Support ticket data is accessible only by authorized support engineers strictly for the purpose of troubleshooting and responding to your inquiry.
• Status Lifecycle: Tickets follow a transparent lifecycle from "Yet to Start" to "In Progress" and "Resolved".

8. Data Retention & Deletion Rights

You maintain full sovereignty over your data at all times:

• Right to Erase: You can delete your chat history or disconnect BYOK API keys instantly with one click.
• Account Deletion: Registered users can request complete account and data erasure by contacting our support desk.
• Ticket Purging: You may request deletion of closed support tickets from our records at any time.

9. Contact & Support Helpdesk

If you have questions regarding this Privacy Policy, your data rights, or custom enterprise compliance requirements: