USAi Trial Privacy Policy
The General Services Administration (GSA) is making USAi (“the service”) available to federal partner agencies, as well as their employees and contractors with authorized network access (“you”). This is a trial designed to further develop and test USAi as a potential shared service.
This privacy policy explains what information the USAi service and federal partners that use the service require (generally, “user contact” and “interaction” information) and how that information is handled and secured. This policy may be updated periodically to remain relevant, accurate, and compliant.
What USAi Collects
User contact and organization information:
- Your name, email address, organization information, and the time you access the service to authenticate into it.
Interaction information:
- Prompts and responses: What you enter into the service (prompts), as well as the responses that the service provides.
- Uploaded Documents: Content, text formatting, and basic metadata (i.e. file type, file name, and word count) from the documents you upload.
- Searches: Search queries generated by Chat as a result of prompts; these queries will only be generated when Web Search is enabled.
- Feedback information: Ratings (thumbs up or down) and any comments you add.
- Connection information: Device and browser information including: your Internet Protocol address (IP); location; the language you are browsing in; and the operating system and browser you are using.
- Usage information: Dates and times of access, the actions you take, and information about your interactions, such as where you navigate, what you click, and API calls you make (e.g., endpoints used, models requested). For more information, see the GSA’s Website policies.
How USAi uses this information
USAi requires user contact and organization information for the following purposes:
- Service operation and security: To provide, maintain, and secure the service; to authenticate users; enforce usage rate limits; and to monitor for, prevent, and respond to security incidents or prohibited uses; and
- Support and troubleshooting: To assist you with support requests and diagnose technical issues.
How Partner Agencies use this information
The GSA USAi team does not own or manage a Partner Agency’s interaction data. Each Partner Agency is responsible for managing its users’ interaction data and overall usage in accordance with its own AI, privacy, and records policies.
Each Partner Agency administrator has access to that agency’s interaction data logs for a limited period of time, after which they are automatically deleted. Each Partner Agency may use the information for their own purposes, including but not limited to:
- Compliance and oversight: To meet federal reporting requirements, conduct required audits, and support oversight activities by authorized entities (e.g., Inspector General, GAO); and
- Records management: To comply with federal records retention requirements and NARA-approved disposition schedules.
Security and privacy measures
The GSA USAi team implements industry-standard security measures in compliance with federal information security regulations; this includes encryption and access controls, to protect and isolate agency data from unauthorized access, use, or disclosure.
AI Model and service providers
USAi operates its AI models from FedRAMP-authorized infrastructure providers. This architecture enables GSA to establish data security and privacy baselines and ensures that user contact information and interaction data are processed only within authorized cloud environments.
Important: The underlying AI models are provided by vendors; however, those vendors do not have access to prompts, responses, or uploaded documents. USAi is hosted on a secure platform managed by GSA.
Privacy Policy contact information
We welcome feedback regarding our privacy policy or the use of your information. If you have any feedback or questions about this policy, contact support@usai.gov.