Good point. To clarify, it wasn't sensitive PII (no private contacts, addresses, etc.). It was just our public team bios and professional resumes.
Because we deleted our traditional 'About Us' page, Google's webcrawler are unable to interact with our AI bot. It's a problem of visibility on Google Search, the logs are our workaround if that makes sense. I left that text exposed in the backend so standard search engines (like Google) could still index who we are and what our qualifications are.
But you are 100% right that seeing it raw in the logs looks sketchy to a user. Thanks for keeping me honest here.
You caught me. Tina is my co-founder, so those are her business contacts, but you're absolutely right, still a dumb move to leave them exposed instead of routing everything through single secure point of contact. I completely missed them when I dumped our raw resumes into the RAG context.
My oversight for blindly claiming the logs were totally clean. I just updated the backend and permanently scrubbed the contacts.
Genuinely appreciate you pushing back and catching my blind spot!
Because we deleted our traditional 'About Us' page, Google's webcrawler are unable to interact with our AI bot. It's a problem of visibility on Google Search, the logs are our workaround if that makes sense. I left that text exposed in the backend so standard search engines (like Google) could still index who we are and what our qualifications are.
But you are 100% right that seeing it raw in the logs looks sketchy to a user. Thanks for keeping me honest here.