Candidate Privacy Policy
Scope and maintainer
This policy describes the bundled clients in these three release candidates and their static website, maintained by Shanlong Ding. They retrieve public WHO and UN statistics. The clients do not require a DSIR account, API key or payment details. The maintainer operates no data-access backend for these plugins.
Requests sent by the clients
- GHO sends requests to
ghoapi.azureedge.netby default. An explicit xMart query usesxmart-api-public.who.int. - SDG sends requests to
unstats.un.org/sdgs/UNSDGAPIV5/v1/sdg. - GHE sends requests to approved GHE and reference tables on
xmart-api-public.who.int.
Requests include the indicator, series or cause identifiers and selected country, region, year, sex, age and other dimension filters, pagination parameters and standard HTTP headers. The source service also receives network information such as the runtime's IP address. Some read-only xMart queries use POST to carry query parameters.
The bundled clients do not send full conversations, uploaded documents or patient records to a maintainer-operated server. Do not put personal or patient information into query parameters. These tools are designed for public aggregate statistics.
Outputs and retention
The clients process public observations in the AI host's runtime. CSV, JSON, provenance, charts and diagnostic files are written there when requested. Diagnostics can include request URLs, filters and source responses. The maintainer does not receive or retain these files through a plugin backend.
Runtime files remain until the user or host removes them under the host's storage rules. The clients do not impose an automatic retention period. A recipient may retain a copy when users share conversations, exports or diagnostic reports.
Host and third-party services
The AI host processes prompts, files, tool execution and outputs under its own policies and account settings. WHO and UN process API requests under their respective policies. Their logging, retention and deletion practices are outside the maintainer's control. See OpenAI's privacy policy and the source organizations' privacy information.
This static GitHub Pages website contains no site-authored analytics, tracking scripts, advertising, forms or cookies. GitHub may collect hosting and security information under its privacy statement.
Support, deletion and choices
GitHub Issues are public. The maintainer can use the information a user posts there to respond; GitHub manages that information under its own policies. Do not post secrets or confidential information.
Stop requests by not invoking or by disabling the plugin. Manage or delete runtime exports, conversations and uploaded files through the host. Use GitHub's controls for information posted on GitHub. The maintainer cannot delete information held independently by the host, WHO, UN or GitHub.
Contact and updates
Contact Shanlong Ding through the repository's GitHub Issues, without sensitive information. Material changes to these clients' data handling will be reflected in this policy and the repository history.