docs/data-policy.md

Data policy for the CuratorBot prototype

Material	Where it may live	Notes
Code, docs, synthetic interview	GitHub (public), Hugging Face Space	MIT licence
Released interviews: media, raw transcripts	private/, encrypted Drive or university storage	Never in git or the Space image
Released interviews: briefs	Private Hugging Face dataset, shown in the private Space	Not in git; confirm release terms before any public showing
Donor submissions shared for this project (Box, pre-accession)	Media in private/ or encrypted Drive; briefs in the private Hugging Face dataset, shown in the private Space	Museum authorisation confirmed by the project lead; never in git or a public Space
Catalogue exports	private/	Used for back-tests and the collection profile
API keys, passcodes	.env locally, Space secrets, GitHub secrets	Never committed

Model providers

Live analysis and offline briefs send transcript text to the configured provider (Anthropic or OpenAI) under your API account. Use accounts and terms your institution approves, prefer zero-retention options where available, and do not send pre-accession material without approval.

Chat projects

The Claude and ChatGPT projects receive only material from the "GitHub (public)" row plus released transcripts you are cleared to share. See project-kit/.

Deletion

When a partner withdraws permission, delete the interview's private/ folder, remove its brief from data/interviews/, push (the Space redeploys) and record the date in private/<ID>/permissions.md before deleting that too.