Privacy and trust
What stays on your computer, what your AI app sees, and how you stay in control.
Summary
Section titled “Summary”- glasstarn runs on your computer. Your files, your projects and every calculation stay there.
- Your AI app sees summaries: counts, times, step names and a few examples. What it sees then goes to the company that runs your AI app, under your agreement with them.
- You approve every data pull, and you can hide names from your agent.
- No account, no telemetry, no hosting. The only request glasstarn makes on its own is a daily check for a newer version, with no data about you in it (see below).
What stays on your computer
Section titled “What stays on your computer”| Thing | Where |
|---|---|
| Your exported files | Where you saved them. glasstarn never changes them |
| Projects (data, decisions, findings) | A glasstarn folder inside the folder you work in |
| Every calculation | The glasstarn engine, on your computer |
| The browser view | 127.0.0.1, only on your computer |
The browser view cannot be reached from other computers on your network.
What your AI app sees
Section titled “What your AI app sees”Your agent reads what glasstarn tells it: totals, times, step names, findings and short lists of examples. It does not get the raw file unless you ask it to open one.
Whatever your agent reads is sent to the company that runs your AI app, the same as anything else you type into it. If your company has approved that app for this kind of data, you are covered. If it has not, ask before you start, or use Hide names below.
What your agent can see
Section titled “What your agent can see”When you connect an agent to a project in the browser, you choose what your agent can see:
- Hide names (recommended): step names, item numbers, people and field values are replaced with codes. Times and amounts stay. Your agent can still find the slow step, but does not know it is called Approve Invoice.
- Show step and column names: the agent sees step, column and record type names, which makes its answers easier to read.
Select Allow access to connect. Turn off access cuts the connection straight away and stays off after a restart.
Pulling data from a system
Section titled “Pulling data from a system”When your agent wants to pull records from a system such as Salesforce or ServiceNow, it shows you exactly what it will pull. The browser shows Extract waiting for your approval. Type your name to confirm, then select Approve and run, or Decline.
- Sign-in details are set on your computer before you start your AI app (your agent tells you how). glasstarn uses them only for the pull, never stores them and never shows them to your agent. Salesforce uses your normal Salesforce login through Salesforce’s own command line tool.
- Pulls run only when you ask, never on a schedule.
The update check
Section titled “The update check”Once a day at most, glasstarn asks the npm registry (registry.npmjs.org) for the number of the latest glasstarn version, so it can tell you when an update is out. The request carries no data about you, your projects or your files. Turn it off with the environment variable GLASSTARN_NO_UPDATE_CHECK=1, or "update_check": false in ~/.glasstarn/settings.json.
Documents you give your agent
Section titled “Documents you give your agent”SOPs, policies and notes you hand your agent are covered by your company’s rules for that AI app. glasstarn records which document and version was used for each point, so anyone can check.
Numbers you can trust
Section titled “Numbers you can trust”- The same data and settings always give the same numbers.
- Your agent quotes glasstarn’s numbers. It does not calculate its own.
- When the data could mean two things, glasstarn asks you. See Data checks.
- How this data was built, in the top bar, shows exactly what was used.
Open source
Section titled “Open source”glasstarn is open source under the Apache 2.0 licence. Anyone can read the code and check what it does.