Understand AI data and privacy

Decide which writing tool to use by knowing what stays in the browser and what source may be sent for a request.

For built-in Orca, CorTeX and its model provider do not use project files or AI prompts to train models. A connected agent is independently operated and follows its owner's model, logging, and retention policy. Different writing tools still need different amounts of source context, so choose the smallest tool that can complete the research task and review what it will use.

Choose by data boundary#

“Browser-local” below describes the analysis step. A signed-in project is still stored and synchronized as described by the current Privacy Policy.

Browser-local writing tools#

Academic phrase palette uses the current writing position, document structure, and phrase search. Search and ranking run in the browser, with no service-side analysis record; inserted source remains ordinary project data. Do not open the palette if you do not want this analysis.

Writing suggestions analyzes supported prose and local document structure in a browser Web Worker after you enable Labs. This analysis does not leave the browser. The enablement preference is stored for this account in this browser. Leave Settings → Labs → Writing suggestions off to avoid analysis; turning it off stops analysis and clears the markers.

Formula meaning analyzes the formula at the caret and bounded source-linked definitions in a browser Web Worker. No model provider receives the formula through this tool. Do not open Math or request Formula meaning if you do not want the analysis.

Built-in Orca: selection or diagnostic#

CorTeX captures the active file. For a selection request, OpenAI receives your instruction, selected source, nearby context, and path. For a diagnostic request, it receives the diagnostic, path, and a bounded excerpt. These requests pass through the CorTeX Worker to OpenAI.

The request uses store: false, which disables OpenAI Responses storage for the application response. CorTeX keeps the run state and artifacts needed for execution, recovery, and review. The public Privacy Policy does not currently promise a fixed deletion period for those run artifacts. To avoid this transfer, use a browser-local tool or do not send the request.

Built-in Orca: full project task#

OpenAI receives the relevant editable project files that Orca reads for the task, along with the instruction and tool results, through the CorTeX Worker. The same store: false setting and CorTeX run retention described above apply. Use a narrower selection or a local tool, or do not send the task, when the project-wide context is unnecessary.

Orca with a personal OpenAI key#

The built-in route uses the same source context and passes it through CorTeX to OpenAI using the encrypted key registered to your account. OpenAI bills the key owner. Review that OpenAI account's data controls and terms; CorTeX cannot change provider-side security or legal handling. Remove the key under Settings → API key, or do not use Orca, to avoid requests using it.

Connected agent#

CorTeX relays the task to the agent paired with the account. One-shot selection and diagnostic tasks include the active file; a full task can request additional editable files. The data passes through CorTeX's relay to the account owner's computer.

CorTeX keeps recoverable task and result artifacts for the run. The independently operated local agent's owner controls its storage, logs, and training policy. To stop this route, open the connection page and choose Disconnect agent, select another eligible route for a new run, or do not send the task.

The focused tools are appropriate when you need a phrase, source-grounded explanation, or local writing opportunity. Use Orca when the task genuinely needs model reasoning, a substantial rewrite, compile assistance, or multiple files. The Privacy Policy is the legal authority; where it publishes no fixed retention period, this guide does not invent one.

Library search and reading#

The personal Library is separate from the browser-local writing tools above. Saved paper details, uploaded PDFs, highlights, and memos are stored by CorTeX. Library search can use server-side PDF text extraction and Cloudflare Workers AI embeddings of paper details, paper memos, extracted text, and search queries. Cloudflare Vectorize stores the resulting search index. Saving a paper is therefore not a browser-only action, even if you never ask Orca a question.

Public-paper discovery and identifier lookup send search terms or DOI/arXiv identifiers to Episteme. Private PDF uploads are not an automatic contribution to that public catalogue. An eligible open-access download is an acquisition route, not a guarantee that every intended reuse is permitted.

Before adding restricted research material, check whether your institution permits this storage and processing. Sharing a writing project does not share Library PDFs or personal memos. Review the Library guide and current Privacy Policy before using Library for sensitive work. A personal collection does not imply browser-only processing or a separate retention or training guarantee.

Review context before sending#

Treat a project-level Orca request as permission to inspect relevant project source. Remove data the task does not require, narrow the request or selection, and do not submit secrets, unpublished participant identifiers, credentials, or restricted data unless your research policy permits that processing.

The built-in provider request uses store: false. That setting is narrower than a promise that no provider security or legal processing can ever occur, so apply your institution's provider policy as well. Some bounded LaTeX helper stages, such as Biber or Xindy, send only the files required for that compile stage to an isolated service; ordinary main TeX passes run in the browser. These compile helpers are not AI model requests.

Understand provider choices#

Orca may use the CorTeX-configured model service, an eligible personal API key, or a connected agent, depending on the account and selected path. A connected agent runs on the account owner's computer and does not silently fall back to a built-in provider when its relay is offline.

Before using a personal key or connected agent, review that provider or local agent's own data handling and organizational policy. CorTeX controls the context and application boundary it sends; it cannot redefine an independently operated agent or provider's environment.

Review output as untrusted advice#

Orca proposes source patches and does not change the project until an authorized editor accepts them. Check citations, numerical claims, equations, and changes outside the selected passage. Save a named version before broad work and reject any patch whose evidence you cannot verify.

Feedback reports do not automatically attach prompts, responses, patches, or document content. Review the disclosure shown by the feedback form before sending diagnostics. Before sending or accepting work, identify which source the tool uses, minimize it for the task, and independently check the result. Compare the browser-local and model-backed choices in Use academic writing tools before sending a new task.