Tbh I have managed to build this minus the nicer interface using langchain. Was surprisingly easy as someone who doesn't dev daily.
Is it?
You are basically entering a contractual relationship with them regarding the propagation of your document and they are themselves entering a contractual relationship with their suppliers. It's not different from hosting in the cloud.
Do you expect every webapps you use to tell you if they use Azure, AWS or GCP?
In their privacy policies, yes. And I expect them to have signed a DPA with those and other vendors.
You are free to want to know the whole chain of companies involved in providing you a service but that’s very unusual.
https://cloud.google.com/terms/subprocessors
https://aws.amazon.com/compliance/sub-processors/
https://www.cloudflare.com/gdpr/subprocessors/
https://www.atlassian.com/legal/sub-processors
https://slack.com/slack-subprocessors
“Step 1
Import or sync documents into Libraria, or add API integrations like Google and Shopify (beta). Bring the docs - let GPT-3.5 do the heavy lifting.”
I might be reading it wrong, or might have missed it on the website, but is it actually GPT-3.5 running over those imported documents? (As in, are you using OpenAI or another third party provider in the background?).
If you’re running a local LLM then the privacy implications are clearly pretty different than if you’re essentially sending people’s documents verbatim into an external LLM.