Privacy Notice

Welcome to Agent Marketplace! We hope that you will be able to enjoy this tool and what it offers. It has been created with privacy and security at its heart as we, Wipro, believe that privacy and innovation can go hand in hand. This notice outlines:

• how Agent Marketplace process personal data
• what happens to the content of your inputs

Finally... a reminder: do not input any personal data in Agent Marketplace! This means any data that could directly or indirectly identify a specific person, yourself included (except for your ADID). Your use of Agent Marketplace is subject at all times to the Agent Marketplace Terms of Use.

What is Agent Marketplace?

Agent Marketplace is a core machine learning/artificial intelligence (ML/AI) and generative AI platform for various internal and external applications. It provides users with a wide range of AI features including private chat and document chat to assist you in your everyday job.

How does Agent Marketplace work?

Agent Marketplace is powered by the following commercial large language models (LLMs): GPT 3.5/4 provided by OpenAI and Palm2 provided by Google. A Retrieval Augmented Generation (RAG) technique is utilized in the platform to improve the quality of the LLM-generated responses for our Wipro employees. This means that the documents you upload during an Agent Marketplace session will be used to improve Agent Marketplace’s responses to the queries you inputted during that session.

Will OpenAI and Google retain what you type and use them to train their LLMs?

None of the data you input into Agent Marketplace will be retained for training or retraining purposes by OpenAI and Google. We opted out of logging our data and monitoring. For further information please check the specific clauses:

- Palm: “Google will not use Customer Data to train or fine-tune any AI/ML models without Customer's prior permission or instruction”, full text available here

- GPT3.5/4: “Training data uploaded for fine-tuning is not used to train, retrain, or improve any Microsoft or 3rd party base models”, full text available here .

What personal data does Agent Marketplace process?

Agent Marketplace will be collecting your ADID to enable a Single Sign On (SSO) authentication.

How will the ADID be processed?

Microsoft Authentication Library (MSAL) will be used for ADID integration. We use the standard SSO AzureAD mechanism (the same that is used in SaaS apps including Office 365, salesforce, workday etc.). This means that your own Azure AD is used for authentication. Wipro does NOT store these credentials.

If you are inactive for a brief period of time (15 minutes), you will be logged out of the system.

The access token will be refreshed and regenerated seamlessly every fifty minutes until you log out.

What about the information you upload?

Access control lists (ACLs) are enabled at user ADID level. This means that your queries and any documents you upload into Agent Marketplace will not be viewable by others through the Agent Marketplace.

Are the user activities and searches stored?

Your queries and Agent Marketplace’s responses are deleted when you log out. Your documents are encrypted in transit and at rest and are stored in Wipro’s Azure Blob storage. Only the user that uploaded the documents has access to them through the Agent Marketplace. Agent Marketplace will assign a dataset id to these documents and the id will be associated with your ADID. These documents will be retained in Agent Marketplace for approximately a month under the dataset id. However, you can and should delete the dataset id at any time it is no longer necessary for Agent Marketplace to retain these documents.

Are there any cookies in the Agent Marketplace app?

Yes, strictly necessary cookies are embedded on the Agent Marketplace. These cookies are essential for navigating and enabling certain functions of Agent Marketplace such as local device authentication, and image caching. These cookies cannot be disabled.

Your rights and choices

Depending on the country in which you are located, and the data protection laws applicable to you, you may be able to exercise rights and request information about how your data is processed. Please note that the only personal data processed by LAIP is your user identifier to the extent it personally identifies you. As mentioned above, Wipro cannot identify users but your organisation´s LAIP administration may be able to do. You may have access to the following rights, which may have important exceptions and restrictions under applicable law:

1. Access to the personal data we process about you;
2. Rectification of your personal data if it is found to be outdated, inaccurate, or incomplete;
3. Erasure of your personal data in cases where it is no longer needed to achieve the legitimate purpose of its processing;
4. Restriction of processing of your personal data in limited circumstances;
5. Portability of your personal data so that you may receive a copy thereof or that we transmit the same to another company on your behalf.
6. You have the right to object to processing of personal data
7. You have the right to lodge a complaint with a supervisory authority
8. You have the right to withdraw your consent at any time with effect for the future under the individual conditions of the consent.
9. Wipro does not sell your personal information.
10. Should you choose to exercise any of your rights under the CCPA & CPRA, Wipro will not discriminate against you in any way.

If you want to know more or if you have any specific questions, we encourage you to contact the Global Data Privacy Team at data.privacy@wipro.com Any feedback on how to improve the transparency of the information we provide is welcome!