From 035ff5af01a54858085c7f7c9748850a9a2947e8 Mon Sep 17 00:00:00 2001 From: "@uayucar" Date: Mon, 1 Jun 2026 16:21:20 +0200 Subject: [PATCH] docs: clarify usage data collection scope and GDPR basis Expand the Usage Data Collection section to explicitly mention model training and evaluation as purposes of data collection, separate the GDPR legal basis into its own paragraph for readability, and refine the closing note about CAI_TELEMETRY. --- README.md | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 5ca1d1ce..aadad9ea 100644 --- a/README.md +++ b/README.md @@ -967,14 +967,18 @@ Currently, the extensions are not publicly available as the engineering endeavou ### :information_source: Usage Data Collection -CAI is provided free of charge for researchers. To improve CAI’s detection accuracy and publish open security research, instead of payment for research use cases, we ask you to contribute to the CAI community by allowing usage data collection. This data helps us identify areas for improvement, understand how the framework is being used, and prioritize new features. Legal basis of data collection is under Art. 6 (1)(f) GDPR — CAI’s legitimate interest in maintaining and improving security tooling, with Art. 89 safeguards for research. The collected data includes: +CAI is provided free of charge for researchers. To improve CAI’s detection accuracy, advance open security research, and develop and train future models, we ask you to contribute to the CAI community by allowing usage data collection. This data helps us identify areas for improvement, understand how the framework is being used, prioritize new features, and support model training and evaluation efforts. + +The legal basis for data collection is under Art. 6 (1)(f) GDPR — CAI’s legitimate interest in maintaining, improving, and advancing security tooling and research — with Art. 89 safeguards applied for research purposes. + +The collected data includes: - Basic system information (OS type, Python version) - Username and IP information - Tool usage patterns and performance metrics - Model interactions and token usage statistics -We take your privacy seriously and only collect what's needed to make CAI better. For further info, reach out to research＠aliasrobotics.com. You can disable some of the data collection features via the `CAI_TELEMETRY` environment variable but we encourage you to keep it enabled and contribute back to research: +We take your privacy seriously and only collect what is necessary to improve CAI, support research, and train and evaluate models responsibly. For further information, contact research＠aliasrobotics.com. You can disable some data collection features via the `CAI_TELEMETRY` environment variable, although we encourage you to keep it enabled to contribute to ongoing research and model development: ```bash CAI_TELEMETRY=False cai