update privacy language per legal

_quarto.yml

@@ -118,6 +118,7 @@ website:
               - assistant-completions.qmd
               - assistant-troubleshooting.qmd
               - assistant-tips.qmd
+              - assistant-provider-info.qmd
             - databot.qmd
         - section: "Language Guides"
           contents: 

assistant-getting-started.qmd

@@ -33,6 +33,10 @@ Positron Assistant supports the following language model providers:
 
 We're actively expanding provider support and welcome your [feedback](https://github.com/posit-dev/positron/discussions) and [issue reports](https://github.com/posit-dev/positron/issues/new/choose)!
 
+Please ensure you consult your provider's privacy policy for information on the data they collect and how it is used. For reference links, see the [Positron Assistant Provider Information](assistant-provider-info.qmd) guide.
+
+For information on what information is collected by Posit, review [Posit's Data Privacy](privacy.qmd).
+
 ## Step 1: Enable Positron Assistant
 
 1. Enable the setting [`positron.assistant.enable`](positron://settings/positron.assistant.enable).

assistant-provider-info.qmd

@@ -0,0 +1,40 @@
+---
+title: "Positron Assistant Provider Privacy Information"
+description: "Information about data handling, privacy, and terms of service for AI model providers used in Positron Assistant."
+---
+
+::: {.callout-tip}
+For information on what information is collected by Posit, review [Posit's Data Privacy](privacy.qmd).
+:::
+
+When using Positron, data including your prompts, responses and data usage may be shared with third-party AI model providers, such as Anthropic and GitHub Copilot, depending on the providers you use. Each provider has its own data handling, privacy policies, and terms of service. 
+
+Please review your providers' websites directly for complete and updated details on their data practices and terms of service. The following list may not be the latest information.
+
+Any Provider is considered "Third Party Materials" as defined in the [Posit End User License Agreement](https://posit.co/about/eula/) and Posit assumes no liability or other obligations with respect thereto and, without limiting the foregoing, is not liable for any loss or damage resulting from the use or access thereof.
+
+### Amazon Bedrock
+
+* [Privacy Notice](https://aws.amazon.com/privacy/)
+* [Terms of Service](https://aws.amazon.com/service-terms/)
+
+### Anthropic
+
+* [Privacy Policy](https://www.anthropic.com/legal/privacy)
+* [Commercial Privacy Center](https://privacy.claude.com/en/collections/10663361-commercial-customers)
+* [Console Privacy Controls](https://platform.claude.com/settings/privacy)
+* [Commercial Terms of Service](https://www.anthropic.com/legal/commercial-terms)
+
+### GitHub Copilot
+
+* [Privacy Statement](https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement#personal-data-we-collect)
+* [Terms of Service](https://docs.github.com/en/site-policy/github-terms/github-terms-for-additional-products-and-features#github-copilot)
+
+### OpenAI
+* [Privacy Policy](https://openai.com/policies/row-privacy-policy/)
+* [Privacy Portal](https://privacy.openai.com/policies/en/?name=welcome-to-open-ai-privacy-portal)
+* [Terms of Use](https://openai.com/policies/row-terms-of-use/)
+
+### Snowflake Cortex
+* [Privacy Policy](https://www.snowflake.com/en/legal/privacy/privacy-policy/)
+* [Terms of Service](https://www.snowflake.com/en/legal/terms-of-service/)

assistant.qmd

@@ -56,16 +56,20 @@ To get started with Positron Assistant, check out the [Getting Started](assistan
 
 ## Support and terms of service
 
-Posit does not provide support or assistance for any code written or generated in Positron, with or without Positron Assistant via any model provider. Posit does not support the Anthropic or GitHub Copilot output, or test the logic used by either to generate code from prompts.
+Posit does not provide support or assistance for any code written or generated in Positron, with or without Positron Assistant via any model provider. Posit does not support the Anthropic or GitHub Copilot output, or test the logic used by either to generate code from prompts. Consult your AI model provider's [documentation](assistant-provider-info.qmd) for more information.
 
-### Anthropic
+### Positron AI agents
 
-Anthropic may collect and store your prompts, responses, and related usage data. For more information about Anthropic's data handling and retention policies, review their [Privacy Policy](https://www.anthropic.com/legal/privacy), their [Commercial Privacy Center](https://privacy.claude.com/en/collections/10663361-commercial-customers) documentation, and your Claude Console [Privacy controls](https://platform.claude.com/settings/privacy).
+The Positron AI tools are “BYO-key”, meaning that the tools can interact with a number of different model providers (e.g., Anthropic, AWS Bedrock, GitHub Copilot, or OpenAI) and the user or organization has an agreement with, pays the model provider, directly for access to the model.
 
-By using Anthropic, you acknowledge that your use of Anthropic is subject to their [Commercial Terms of Service](https://www.anthropic.com/legal/commercial-terms). Anthropic is considered "Third Party Materials" as defined in the [Posit End User License Agreement](https://posit.co/about/eula/) and Posit assumes no liability or other obligations with respect thereto and, without limiting the foregoing, is not liable for any loss or damage resulting from the use or access thereof.
+### Data collection and privacy
 
-### GitHub Copilot
+Positron provides local software as a client to the user’s selected model provider. As a result, Posit does not track, collect, or store your prompts, code, or conversations when using AI features within Positron (i.e. Positron Assistant, Databot, etc). These features operate by communicating directly from your client software to your chosen AI model provider. Posit does not receive any AI traffic from your client’s software and nor does Posit ever access or store your data. 
 
-GitHub may send individual snippets of source code or the contents of entire files to its servers to generate suggestions. For more details about how this information is handled, please see the [Copilot Privacy Statement](https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement#personal-data-we-collect).
+If you voluntarily share diagnostic logs or information with Posit for troubleshooting purposes, that shared information will be handled in accordance with [Posit's privacy policy](privacy.qmd).
+If you voluntarily share diagnostic logs or information with Posit for troubleshooting purposes, that shared information will be handled in accordance with [Posit's privacy policy](privacy.qmd).
+If you voluntarily share diagnostic logs or information with Posit for troubleshooting purposes, that shared information will be handled in accordance with [Posit's privacy policy](privacy.qmd).
 
-By using GitHub Copilot, you acknowledge that your use of GitHub Copilot is governed by their terms of service and you agree to abide by their [terms of service](https://docs.github.com/en/site-policy/github-terms/github-terms-for-additional-products-and-features#github-copilot). GitHub Copilot is considered “Third Party Materials” as defined in the [Posit End User License Agreement](https://posit.co/about/eula/) and Posit assumes no liability or other obligations with respect thereto and, without limiting the foregoing, is not liable for any loss or damage resulting from the use or access thereof.
+However, your AI model provider (such as [Anthropic](assistant-provider-info.qmd#anthropic) or [GitHub Copilot](assistant-provider-info.qmd#github-copilot)) may store or collect data according to their own privacy policies and terms of service. Please review your [AI model provider's data practices](assistant-provider-info.qmd) for details on what information they collect and how it's used.
+
+By using an external model provider, you acknowledge that your use is subject to their Terms of Service. All external model providers are considered “Third Party Materials” as defined in the [Posit End User License Agreement](https://posit.co/about/eula/) and Posit assumes no liability or other obligations with respect thereto and, without limiting the foregoing, is not liable for any loss or damage resulting from the use or access thereof.

download.qmd

@@ -12,17 +12,15 @@ format:
 
 Find out what you need to know before you [install](install.qmd) Positron, then download the desktop installer for your platform.
 
-::: callout-important
+:::: callout-important
 ## Accept license agreement
 
 Please review [Positron's license agreement](licensing.qmd) and [privacy policy](https://posit.co/about/privacy-policy/). Your acceptance of this license agreement and privacy policy is required as a condition to proceeding with your download or use of the software.
 
-<div id="privacy-policy-agreement">
-  <input type="checkbox" id="privacy-checkbox" onclick="updatePrivacy(this)">
-  <label>I agree to the [Positron license agreement](licensing.qmd) and [Posit Privacy Policy](https://posit.co/about/privacy-policy/).</label>
-</div>
+::: {#privacy-policy-agreement}
+<input type="checkbox" id="privacy-checkbox" onclick="updatePrivacy(this)"> <label>I agree to the [Positron license agreement](licensing.qmd) and [Posit Privacy Policy](https://posit.co/about/privacy-policy/).</label>
 :::
-
+::::
 
 ```{r, id='download-table'}
 #| echo: false

privacy.qmd

@@ -25,3 +25,17 @@ When you visit our website or download our software, Posit logs network access i
 Positron also includes an option to share the primary data science languages in use, such as Python and/or R.
 
 - To stop Positron sharing the primary data science languages in use, disable the  [`update.primaryLanguageReporting`](positron://settings/update.primaryLanguageReporting) setting.
+
+### What information do we NOT collect?
+
+#### AI usage
+
+Posit does not track, collect, or store your prompts, code or conversations when using AI features within Positron (i.e. Assistant, Databot, etc) with external model providers. However, your AI model provider (such as [Anthropic](assistant-provider-info.qmd#anthropic) or [GitHub Copilot](assistant-provider-info.qmd#github-copilot)) may collect data according to their own privacy policies and terms of service. Please review your provider's data practices for details on what information they collect and how it's used.
+
+#### Your work
+
+Posit does not collect, store, or transmit the contents of your code files or data unless you explicitly share them with us (such as when submitting diagnostic logs for support).
+
+#### Voluntary information sharing
+
+If you choose to share diagnostic logs or other information with Posit for troubleshooting purposes, that information will be handled in accordance with [Posit’s Privacy Policy](https://posit.co/about/privacy-policy/).