Privacy — HMI Import Preflight

Last updated: 14 October 2026. HMI Import Preflight is an independent RegEvidenceHub service. “FactoryTalk” is a Rockwell Automation trademark; this service is not affiliated with or endorsed by Rockwell Automation.

Information we process and why

• CSV text and the fields in it are processed to run the import-format checks the user requested. The no-payment ChatGPT endpoint is /openai/mcp; the commercial MCP endpoint is /mcp. Both return a result, issue messages, and available row/record details. Regular checks run in memory and the application does not intentionally store the submitted CSV or result.
• If a user explicitly starts a paid case-continuation flow, the CSV text needed to restore that check is temporarily stored on the product service. The configured lifetime defaults to 24 hours. The state reference and continuation metadata are sent to the RegEvidenceHub commercial platform to issue and validate access; CSV contents are not sent to that platform. Expired case files are removed by the service cleanup process.
• For service reliability and usage attribution, the application records tool name, event type, timestamp, deployment, outcome category, and an explicitly supplied source channel. When supplied by the MCP protocol it may also record client name/version and request ID. This data is used for service operation and aggregate attribution, not to analyze CSV contents.
• Hosting and network infrastructure providers may process connection metadata such as IP address, request path, time, and status for security and operations. Infrastructure logs do not include CSV request bodies by application design. Provider retention is governed by the provider's current terms and configuration.
• When accessed through ChatGPT, prompts, attached files, tool inputs, and returned results are also processed by OpenAI under its applicable policies. Review ChatGPT's privacy policy and chat and file retention controls.
• Paid calls may use the configured payment facilitator (Coinbase Developer Platform) and the RegEvidenceHub commercial platform. Payment proof and transaction metadata are processed to verify payment; payment card or wallet credentials are not collected by the CSV checker. The commercial platform may use Stripe for prepaid entitlements; its privacy practices are described at Stripe Privacy.

Recipients

Data is processed by RegEvidenceHub's HMI Import Preflight service, its hosting/infrastructure providers (currently Railway), OpenAI when the user chooses ChatGPT, and the RegEvidenceHub commercial platform and configured payment providers only when the corresponding paid flow is used. The service does not sell submitted CSV contents.

Retention

For regular checks, CSV text is held in memory for the request and is not intentionally retained by the application. Paid continuation cases are kept until their configured expiry (24 hours by default) and removed by the cleanup process. Operational application logs contain event metadata but not CSV bodies. Infrastructure providers may retain connection and platform logs under their own policies; see Railway's privacy policy.

Your choices and requests

Do not submit personal data or confidential content that is not needed for the check. You can avoid the service, use only synthetic or redacted CSV, and delete your ChatGPT conversation or files using the controls in your ChatGPT account. To ask about product-held data or request help with a paid continuation case, contact RegEvidenceHub support and include the case reference if available; do not post CSV contents publicly. Requests concerning OpenAI, Railway, or payment-provider data must be made to those providers.

Changes and contact

We may update this notice when the service's data practices change. Use the support link above for privacy questions.