Privacy notice
OPV intranet demo and ostranderpv.com · Last updated 15 October 2026
This is a demo built around a fictional company. Ostrander Pump & Valve does not exist, and all the business data in
the intranet is synthetic. The intranet at intranet.ostranderpv.com is a private test bed for AI data agents, open
only to people I have invited. This notice explains what personal information the demo handles about those people, and about
visitors to this public site.
This public site
- No sign-in, no cookies, no analytics and no advertising.
- The page loads its fonts from Google Fonts, so your browser connects to Google's servers, which see your IP address and browser details under Google's privacy policy.
- I don't keep visitor logs for this page.
What the intranet collects
- Your Google account identity. Google's Identity-Aware Proxy (IAP) signs you in with your Google account and passes your email address and Google account ID to the app. The app uses them to check that you were invited and to label what you do. IAP keeps you signed in with a cookie. When you sign out, the app sets its own cookie that remembers you signed out.
- OPVChat conversations. When you ask OPVChat a question, the app saves the conversation: your email address, the agent role you picked, your questions, the agents' answers, the tool calls and SQL they ran, and timing, token and cost figures. Saved conversations are listed on the OPVChat page with your email address and first question, so other invited testers can see and reopen them.
- Memos you have read. The app records which company memos you have opened and when, against your email address, to show your unread count.
- Practice orders. Orders you enter in the order-entry sandbox record your email address as the person who entered them, and other testers can see them.
- Logs. Google Cloud records each request to the intranet (address requested, time, response, your IP address and browser user agent). The database logs the SQL statements it runs, including queries the agents and the SQL scratchpad run for you. The app's own logs record conversation ids, agent roles and costs.
Why
To control who can use the demo, to run it, to fix problems, to keep its spending within a daily budget, and to study how the agents behave. I may reuse questions asked in OPVChat as test cases for the benchmark, without the email address of the person who asked them.
Who else handles it
The demo runs entirely in a Google Cloud project that I control. To answer your questions, the app sends them, along with data retrieved from the fictional company's database, to Google Cloud services: Gemini models on Vertex AI, the QueryData API and Knowledge Catalog. Google processes this as my cloud provider under the Google Cloud terms. I don't sell or share your information with anyone else, and nothing in the demo is used for advertising.
How long it is kept
- Request and database logs: 30 days, then deleted automatically.
- Saved conversations, practice orders and memo read status: for as long as the demo runs, unless I delete them sooner. Deleted conversation files can be recovered for 7 days and are then gone.
Your choices
- Please don't type real personal or confidential information into the intranet. The company is fictional, and questions about it need none.
- You can ask me to delete your saved conversations and practice orders, or to remove your access, at any time.
Contact
Questions or requests about this notice: andybrook@gmail.com
Changes
If the demo starts handling information differently, I will update this page and the date at the top.