DATA HANDLING & USAGE POLICY

Governance Document for the WINDI System

VERSION 1.0
"Only data necessary for operational workflows should be entered into the system."
— Data Minimization Principle
Section 2

Scope of Data

The WINDI System may process: text-based workflow inputs, system-generated structured outputs, operational metadata such as timestamps and process logs.

Important Limitation

The system is not intended for storage of highly sensitive personal, medical, or financial data unless governed by additional safeguards.

Section 3

Data Minimization Principle

Only data necessary for operational workflows should be entered. Users are responsible for avoiding unnecessary personal or sensitive information.

Section 6

Data Storage & Logging

Data TypeLocationRetention
Document contentSQLite databaseUntil deletion
Audit trailForensic ledgerPermanent
Session stateMemorySession duration
BackupsBackup directoryRolling
Section 7

Access Control

Access is restricted to authorized users within defined institutional roles. Anonymous or public access to internal functions is not permitted.