Anonymous use
Conversations without an account live only in your browser. The server keeps aggregate counters and error classes, never message bodies. Requests are protected by bot verification and rate limits.
Answers and provenance
Every corpus-backed statement carries a claim identifier that resolves to a source record with publisher, tier, dates, and locator. Inferences and field reports are labeled as such and never promoted to documented fact.
Customer material
When accounts and private knowledge arrive, organizational uploads will be tenant-isolated and layered over the shared corpus at retrieval time. They will never train or expand the shared corpus without explicit, separate permission.
Local tools
Local-file reports, Trace Studio, Flow Studio, and UCCX Script Studio process files in the browser tab. Their routes block fetch, XHR, and WebSocket connections while a file is open; files are not uploaded or sent to AI. Sanitized exports omit or alias supported identifiers; review any download before sharing it.
UCCX AEF files
UCCX Script Studio reads an AEF as inert bytes inside a disposable browser worker. The raw file and filename are not sent to the server, written to logs, or placed in browser storage. Prompt text, values, and decoded strings are discarded in the worker rather than returned to the interface. The worker returns only a bounded structural projection and is then terminated. WarmTransfer does not bundle customer AEF files or invoke Java deserialization. Closing the script removes the projection from the interface; only a report you explicitly download is saved to your device.
Connected reports
Connected Webex reports currently use a Webex Developer Portal bearer token (personal access token), which is valid for up to 12 hours. WarmTransfer uses it in transient memory for one report retrieval through fixed read-only Metadata and Search requests, clears it after the request, and does not store it. Connected report data stays in the tab for up to 30 minutes. Downloads remain on your device and can contain customer identifiers if you choose record-level export.
When a report starts in chat, the conversation passes only the report setup to Report Studio. Report Studio then asks for the bearer token in its protected credential field; the token does not belong in the chat.
Providers
Model and infrastructure providers are replaceable behind a boundary. Production inference runs on the model provider's paid API tier, under terms that do not use prompts or responses to improve the provider's products; provider logging is limited to abuse detection and legal requirements. Provider credentials live in platform secrets, never in the application.
Contact
Security questions: hello@warmtransfer.net.