Hacker News new | ask | show | jobs
by codetrotter 1272 days ago
> Note from Kevin! Bear with me, this is just an automatically generated privacy policy. I will get a real one soon.

> What you probably want to know is if your emails are safe! Yes, they are safe. All emails are encrypted in transit and at rest. However, to use OpenAI we need to decrypt on the server before making an API request. In the future, I would love to run our own LLM completely in house so your emails never get sent to any third party ever.

https://www.emailtriager.com/privacy

I sympathise with the fact that formulating a good privacy policy is difficult.

However, I would like to see a better, more specific privacy policy.

Also curious about the implications of forwarding all emails received from others to EmailTriager and to OpenAI.

I am sure some people will not like the idea that private communication that they write to others are made available to EmailTriager and OpenAI.

3 comments

I don’t get this comment’s purpose. The site’s author already agrees with you and has committed to making a better privacy policy. It’s on the list, it’s not like someone has to be reminded of the importance of it was already called out by the author themselves.
> The site’s author already agrees with you and has committed to making a better privacy policy. It’s on the list

Because, my friend, there are some things that go on to-do lists and some things that do not.

Launching something that collects personal data AND forwards it to a third party API ? Nah mate, that's NOT something where you can justifiably put "Privacy Policy" on your nearest To-Do list.

In addition, if you are potentially dealing with users in Europe who are covered by GDPR, a real Privacy Policy is NOT an option, it is MANDATORY.

I'm tired of software developers, irrespective of size, thinking it's a-ok to to take liberties with the personal information of others and/or not be transparent in what they do with your personal information.

The fact you are a mom 'n' pop shop and not Google does not make it any more ok.

Privacy cannot be an afterthought.

It’s clearly a hobby project, which means leeway is much more allowed. Furthermore, who are you to tell someone what is required, especially when you’re not paying or even using their service.

Additionally, the existing privacy policy is a real policy. Just because it was generated doesn’t mean it’s not applicable. Not every policy needs to be handcrafted with love.

What, exactly, is wrong with the current policy? Have you even read it?

Finally, what exactly is the purpose of your comment? You may think it’s required, and that’s great, but so what? What does that change? Even remotely? Is the author going to get in a Time Machine and go back to before they created their project to make sure a Privacy Policy is the first thing they make? No.

Once again, it’s on the list, the author will appease you eventually. Until then, don’t use the service. Problem solved.

> It’s clearly a hobby project, which means leeway is much more allowed

I'm sorry, but what sort of bullshit is that ?

The law does not differentiate between "hobby project" or not.

It would be the ultimate get-out clause for criminals ... "yes, officer, I'm distributing cocaine, but don't worry, its only a hobby project".

So it turns out the US actually does make that differentiation. A non-violent individual hobbyist who occasionally deals cocaine on the side and isn't part of a gang isn't charged the same as Tony "Scarface" Montana. Career criminals like the fictional Tony Montana get "I'm a professional" charges while hobbyists do not. Professionals get charged under the RICO Act, which stands for "Racketeer Influenced and Corrupt Organizations".

https://en.wikipedia.org/wiki/Racketeer_Influenced_and_Corru...

> What, exactly, is wrong with the current policy? Have you even read it?

Don’t dodge questions which destroy your arguments and argue against a ridiculous strawman. What, exactly, in explicit detail, is illegal about what the author has done?

And its obvious, leeway is allowed because it’s a personal project. Nobody is about to prosecute someone over a random hobbyist project that is used by a few dozen people. The amount of resources used will never come close to the payout that would come out of that.

So don’t use the service until they have a privacy policy.
lol privacy policy is definitely one of the things that goes on the TODO list.
A big part of launching a minimum viable product is that you get feedback from users about which missing features they care about. GP is providing that feedback.

The author said that a privacy policy is on their TODO list, but user feedback can influence what priority it receives relative to other items on their list.

I think using GPT to generate privacy policy might be even better startup idea, than generating emails. And then another service to shorten privacy policy to prompts.
The screenshots are from Gmail users; I assume anyone using Gmail doesn't really care that much about the privacy of their email.