CPI Copilot — Privacy Policy

Version: 4 October 2026. Covers the website, accounts, personal monitoring, Workspaces, and browser extension.

Who handles your information

CPI Copilot is operated by Tharani Matam Anishwar, based in Hyderabad, Telangana, India. Contact support@cpicopilot.com for privacy questions, security concerns, or data requests. CPI Copilot is independent of SAP.

Account and service information

We process your email address, hashed password, account status, usage and quota records, and service settings to authenticate you, operate your account, and protect the service. Login tokens are stored in your browser. Passwords are hashed rather than stored as recoverable plaintext. Signup and password-reset codes are temporary verification data and expire after 15 minutes.

When you accept the Terms, we store the document version, document hashes, acceptance time, and whether acceptance occurred during registration or through your account. This records which Terms and Privacy notice you were shown. The acceptance record does not include an additional copy of your IP address or browser fingerprint. Infrastructure logs may separately contain request information.

Connected SAP tenants and integration content

We store configured tenant connection information, including API credentials, in an encrypted form in the application database. The backend decrypts these credentials when it needs to authenticate to SAP. Encryption does not mean the operator or application can never access the decrypted information.

Depending on your selected features, the service reads integration metadata and designs, message-processing information, errors, custom headers, runtime timing, and queue information. It may cache results in memory and store monitoring settings, history, runtime aggregates, and usage records. Saved designs and artifact-replacement backups can contain integration content in the database. Do not treat all integration data as temporary or browser-local.

Errors, headers, scripts, and uploaded examples may contain personal or confidential information. Remove unnecessary sensitive fields before submission or enabling relevant features. Redaction and sanitization are not guaranteed. Some tools can also perform SAP writes when requested and permitted by your SAP credentials; see the Terms of Service.

Workspaces and sharing

Workspaces store membership, invitations, tenant configuration, flow and queue assignments, monitoring snapshots, activity records, and email settings and delivery records. Owners and administrators have access according to their roles; members receive access to assigned resources. Workspace credentials are managed by the owner and are not displayed to members.

Selected recipients may receive information about their assigned resources by email, subject to the alert settings. Current Workspace monitoring uses operational metadata and does not enable AI analysis or fetch message bodies and custom headers for its reports. Personal monitoring and developer tools can process different information.

People authorized by your organization can manage shared information. Removing a member cannot erase copies they previously downloaded or received by email. Check with your organization before submitting its information or inviting recipients.

AI processing

AI-assisted generation, explanation, troubleshooting, and monitoring questions can send your prompts and relevant integration or diagnostic context from the CPI Copilot backend to the selected AI service. The default provider is Azure AI, using GPT-4.1 mini as configured by the operator. Supported account-configured providers may differ. Bringing your own AI key does not make those requests browser-local.

AI processing depends on the feature and its configuration. Do not assume there is one switch that disables every AI path. Provider retention, processing location, and other handling depend on the actual provider and deployment. We do not make a blanket zero-retention or no-training promise across all providers. Ask support about your intended feature and deployment before submitting information with specific handling requirements.

Browser extension

The extension stores your CPI Copilot account email and login token in local extension storage for account-assisted features. It sends sign-in credentials to CPI Copilot over HTTPS but does not persist your password in extension storage. Signing out removes the stored login token.

Browser-local Steps, Trace, and Compare use your current SAP browser session to read available integration and trace information. Local analysis may include scripts, mappings, schemas, headers, properties, and message bodies. This local feature content remains in the SAP tab's memory, is not uploaded to CPI Copilot or AI by those local paths, and is lost on refresh or closing the tab. Available data depends on SAP permissions and trace retention.

Backend-assisted paths are different: Explain and connected design inspection or comparison can use your saved tenant connection to retrieve integration content. Explain sends relevant content through the backend to the configured AI provider. These on-demand extension results are returned to the browser rather than saved as extension-result records in our database; that does not describe other web-app saved-design features or provider and diagnostic logs.

The extension uses storage permission for its local account state and host access to supported SAP Integration Suite sites and cpicopilot.com for its features. The extension does not itself edit or deploy SAP artifacts. Browser-local functions do not require sending trace data to our backend.

Providers and international processing

Email content and addresses pass to the delivery provider and recipients' email systems. We do not use account information or SAP integration content for advertising or sell it. We may disclose information when required by applicable law or reasonably necessary to address abuse or security incidents, subject to applicable legal requirements. Depending on the service used, your information may be processed outside India or your own country.

Retention and deletion

There is not yet a single automatic deletion schedule covering every category of database data, logs, and provider records. A short display window in the UI does not establish that older database information has been erased. Configuration, saved designs, monitoring records, usage, and shared Workspace information may remain until deleted through the available processes. Do not assume a fixed retention period that has not been confirmed.

You can request account deletion or information about retained data at support@cpicopilot.com. We may verify your identity and authority. Shared Workspace ownership may need to be transferred or resolved before an owner account can be removed. Removing active database records does not by itself erase delivered emails, recipients' copies, infrastructure records, or provider logs. Some information may need to be retained to meet legal obligations or handle a dispute; we will explain applicable limitations when addressing your request.

Stopping monitoring is different from deleting data. Signing out does not stop background monitoring. Use Stop to stop checks, and revoke or rotate credentials in SAP to withdraw API access. Already issued tokens and in-flight operations may take time to cease. Contact support for deletion assistance; do not send passwords or service keys by email.

Your choices and requests

You can manage your connection settings, monitoring selections, report recipients, and available feature settings. Contact support to request access to, correction of, or deletion of your personal information, to ask about processing, or to raise a privacy complaint. Requests are handled subject to applicable law and your authority over the information. Acknowledging this notice at signup does not authorize marketing emails or waive your legal rights.

Security and changes

The service uses measures including password hashing, encrypted stored credentials, authentication, and role-based Workspace controls. These measures do not guarantee complete security. The beta is not represented as independently certified or as providing guaranteed backup recovery. Request current security information before connecting sensitive or business-critical data.

Material changes to this notice will be identified by a new version and communicated through the service or available account contact channels as appropriate. New processing that requires separate consent will require that consent; general acceptance of Terms is not permission for every future use of data.

Tharani Matam Anishwar — CPI Copilot
Hyderabad, Telangana, India
support@cpicopilot.com