AI processing disclosure
Copy-paste language disclosing automated AI processing to end users, for GDPR Article 22-style requirements.
ARCY AI uses a third-party AI model to power its Chat, Copilot, and Autopilot modes, and to detect at-risk usage patterns. If you operate in a jurisdiction with automated-decision-making disclosure requirements (GDPR Article 22 and similar), your privacy policy likely needs a specific disclosure for this, distinct from the general data-collection paragraph.
This is boilerplate, not legal advice. Whether this rises to "automated decision-making with legal or similarly significant effect" under GDPR Article 22 depends on how you've configured Autopilot mode and what actions it's allowed to take unsupervised in your product. Have your own counsel assess this for your specific configuration.
What to paste
Automated Processing and AI Features
[Your Product Name] uses an AI assistant, powered by ARCY AI, that may:
- Answer your questions using context about your account and how you use
[Your Product Name] ("Chat")
- Highlight steps on the screen to guide you through a task ("Copilot")
- With your confirmation at each step, or for pre-approved low-risk actions,
perform actions in [Your Product Name] on your behalf, such as navigating
pages, clicking buttons, or filling in forms ("Autopilot")
- Analyze usage patterns to identify when you might be struggling with a
task, which may trigger a proactive suggestion or a prompt to reach our
support team
These features are powered by a third-party AI model. Neither [Your Company
Name] nor ARCY AI uses your conversation content, session data, or
behavioral data to train AI models, ours or the underlying model provider's.
AI-generated responses and Autopilot's proposed actions are not used to make
legal or similarly significant decisions about you (for example, decisions
about eligibility, pricing, or account status) without human review.
You can decline these features at any time by [describe your opt-out
mechanism, e.g. "closing the assistant panel" or "disabling it in account
settings"].Notes on filling this in
- The claim "not used to make legal or similarly significant decisions about you" is only accurate if that's actually true of how you've deployed Autopilot. If Autopilot in your product can take an action with real consequence (for example, submitting a payment or deleting data) without a human confirming it first, remove that sentence and get specific legal advice instead, since GDPR Article 22 may genuinely apply.
- Autopilot's own safety posture, irreversible actions and destructive actions always pause for confirmation regardless of mode, is described in AI modes. Don't promise a stronger guarantee than what's documented there.
- ARCY AI does not retain AI request content beyond serving the request; see Zero Data Retention if you want to reference that in your own disclosure.