This index describes the released website and the stated product boundaries. It separates implemented behavior from items that require an owner decision or legal review.
The table states the normal path for each named feature. Selection of a source, provider, or export destination can change the recipient and fields.
| Feature | Recipient | Fields or data category | Boundary |
|---|---|---|---|
| Browser CSV workbench | The browser on this device | CSV rows and cells, column roles, question, analysis choices, generated results, and an optional local session. | The released workbench has no CSV upload endpoint and does not collect public sources or offer hosted AI. |
| Static website delivery | Website host and network providers that deliver the page | Standard request and connection metadata needed to request, route, and protect a page. | The released pages contain no advertising or analytics scripts. Hosting-provider processing needs owner and legal review. |
| Windows public-data collection | The public site, search service, or provider API chosen by the researcher | Query terms, target URLs, request metadata, and a researcher-owned credential when that provider path uses one. | Recipients and exact fields depend on the selected source and provider. Source terms and permissions remain the researcher's responsibility. |
| Windows provider credentials | The provider API selected by the researcher | A researcher-owned credential used for that provider request. | The browser workbench exposes no credential controls. Windows credential custody and local-storage detail require owner and security review. |
| Optional Windows AI assist | The provider selected by the researcher | Route-specific context. Ask and AI-authored analysis receive the question, schema, and method list; AI-authored analysis may also receive prior method names. With provider opt-in, method selection receives the researcher's methodology text, schema names and roles, fixed method catalog, and explicitly selected design-context fields. After disclosure, Define research variables receives selected source-text segments plus their row IDs and content-state markers, the researcher's field definitions, and a source-snapshot digest. Scoped PDFs also include selected-page scope metadata. Semantic Scout receives bounded excerpts after BYO-key opt-in. | Ask, method selection, and AI-authored analysis do not send dataset rows, cell values, or the full CSV. Define research variables sends selected record context; it does not send unselected rows or the full CSV. Semantic Scout removes record identifiers, URLs, source labels, and other record metadata before its request. The browser workbench does not offer hosted AI. |
| Windows download links | An external release host | Standard request and connection metadata for the requested installer or ZIP. | The website redirects artifact downloads to that host. Compare the shown version and SHA-256 value before running a file. |
A retention statement is useful only when the location and deletion control are known. This page does not establish an automatic deletion schedule where implementation evidence is absent.
| Data category | Current behavior or status | Deletion path or review need |
|---|---|---|
| Browser active session | The chosen CSV and analysis state stay in the browser memory used by the workbench. | Use Start over to clear the active workbench state. Closing or reloading the page ends the active browser session. |
| Browser remembered dataset | Remembering a dataset is opt-in. The workbench describes a local retention period of up to 30 days. | Use Clear stored data or browser storage controls. The exact browser-storage behavior remains subject to browser settings. |
| Windows runs, raw records, and local sessions | These are local application artifacts. A public automatic-retention schedule is not established on this website. | Owner and implementation review are required to identify paths, defaults, and a supported deletion procedure. |
| Exports and reproducibility bundles | Exports and bundles are local files chosen by the researcher. | The researcher controls the destination and deletion. Owner review is required for any future managed export store. |
| Handoff artifacts and logs | The public website does not document a managed handoff or log-retention service. | Do not assume a retention period. Owner and legal review must define recipients, locations, and deletion before such a service is released. |
Send a concise report to al@collabysis.com. Include the affected public surface, a safe reproduction description, and a contact method. Do not send credentials, private datasets, or active exploit payloads.
Owner review is needed for an acknowledgement target, safe-harbor language, and a published incident-response process.
Automated source-level checks cover keyboard-accessible workbench controls, a visible cancellation control, semantic table headers, chart text and table alternatives, focus styling, and reduced-motion rules.
A rendered screen-reader, zoom, and reflow assessment remains an independent release gate. This page makes no full accessibility conformance claim. Report a barrier at al@collabysis.com.
Collection from a third-party source remains subject to that source's terms, permissions, and applicable law. The product license and distributed component notices are available at License and third-party notices.
User-created findings, charts, generated code, and reproducibility packages may be shared. Third-party source material retains its own rights and terms.
Owner and legal review are required for jurisdiction-specific rights, licensing-record treatment, and any future hosted-content policy.
The browser workbench does not provide hosted AI. In the Windows app, Ask and AI-authored analysis send the question, schema, and method list; AI-authored analysis may also send prior method names. With provider opt-in, method selection sends your methodology text, column names and roles, the fixed method catalog, and design fields you explicitly selected. These routes do not send dataset rows, cell values, or the full CSV. After explicit disclosure, Define research variables can send selected source-text segments with their row IDs and content-state markers, your field definitions, and a source-snapshot digest; scoped PDFs also send selected-page scope metadata. Semantic Scout can send bounded excerpts only after BYO-key opt-in. These routes do not establish factual accuracy, source permission, statistical validity, or a decision.
Researchers review the selected method, results, source terms, and any output before relying on them. Provider retention and processing terms require separate review.
Downloads are served by an external release host. The download page shows the current version and SHA-256 values, and the website also exposes release metadata and a website asset manifest.
The current Windows executable is unsigned. Windows may show an unknown publisher or SmartScreen warning. Compare the checksum before running it.
