Status: a factual description written by PlastiMind, not a legal document. It exists so a lawyer drafting the customer agreement, and a shop's IT person reviewing Phil, both start from an accurate picture of what the software actually does. Every claim below is true of the code as built — where something is a policy rather than a technical guarantee, it says so.
Not legal advice. Have a lawyer turn the relevant parts into contract terms.
What Phil is
An assistant that answers injection-molding questions using your own documents. It carries the approach of a molding consultant PlastiMind's founder knew; it does not claim to be a person, and it is not a substitute for one.
Where your data lives
Starter (installed on your PC)
| What | Where it lives | Leaves your building? |
|---|---|---|
| Your documents (SOPs, spec sheets) | Your PC, in PhilData\documents | No |
| The search index built from them | Your PC | No |
| Shift logs, machine list, calculations | Your PC | No |
| Chat history | Your PC | No |
| The excerpt relevant to a question | Sent to PlastiMind's relay, then to Anthropic | Yes — see below |
Managed (PlastiMind hosts it)
Identical, except "your PC" is a server PlastiMind rents in the United States, dedicated to you and not shared with another company. PlastiMind's staff can technically reach it, because someone has to be able to fix it.
What is sent when you ask a question
This is the part worth understanding, and the part most likely to be misunderstood.
Phil searches on your machine and finds the few passages most relevant to your question. It then sends only those passages, plus your question and the recent conversation, to PlastiMind's relay, which forwards them to Anthropic's Claude API and returns the answer.
Your document library is never uploaded. Only the excerpts needed to answer the question in front of you, at the moment you ask it.
Why there is a relay at all
Honestly: to protect PlastiMind's intellectual property. Phil's personality and instructions are the product, and they stay on PlastiMind's server rather than being shipped to every customer's PC. It also means a licence can be switched off if a subscription lapses.
A side effect that benefits you: PlastiMind's Anthropic key is used, not yours, so there is no separate AI account for you to manage or pay for.
Who can see what
| Your documents | Your shift-log data | Your questions | |
|---|---|---|---|
| You | Yes | Yes | Yes |
| PlastiMind — Starter | No | No | Only what you send in a support request |
| PlastiMind — Managed | Technically yes (we run the server) | Technically yes | Same as Starter |
| Anthropic | Only excerpts sent with a question | Only a summary, if relevant | Yes |
PlastiMind does not log the content of your questions or Phil's answers. The relay records that a licensed shop made a request, not what was asked. That is a deliberate choice and a policy, not something the software enforces against PlastiMind — a future version could change it, and this document would have to change with it.
Anthropic
Chat goes to Anthropic's API. Their commercial terms, at the time of writing, state that API inputs and outputs are not used to train their models. This is a third party's commitment, not PlastiMind's — verify it independently if it matters to you, and re-check it, because third-party terms change.
Access control
- Starter is reachable only from the PC it is installed on unless you change that. A shop passcode is optional and recommended if other machines on your network can reach it.
- Managed always requires a shop passcode. The software refuses to start without one when reachable over a network — this is enforced in code, not by policy.
- One passcode per shop, not per person. Phil is a shared floor tool.
Retention and deletion
- Starter: delete the folder. Nothing of yours is anywhere else.
- Managed: PlastiMind deletes your server and its backups on request. Backups roll off after 30 days, so a deletion request is satisfied immediately for live data and within 30 days for backups.
- Anthropic retains API data under their own policy, which PlastiMind does not control.
Backups
-
Starter: yours.
PhilDatais your only copy. Include it in whatever you already back up. PlastiMind has no copy and cannot recover it for you. - Managed: PlastiMind's. Nightly, verified, retained 30 days.
What Phil is not
Phil gives advice on machines that run hot and close under tonnage.
- It is advisory. A qualified person decides what happens on the floor.
- It can be wrong, especially where your documents are silent, out of date, or contradict each other.
- Its engineering values — clamp factors, thermal properties, ejection temperatures — are rules of thumb that vary by grade and geometry. They are a starting point for a setup sheet, never a substitute for a mold trial.
- It has no connection to your machines. It cannot change a setpoint.
Questions a shop's IT person usually asks
Does it need inbound firewall access? No. Starter binds to the local machine and makes outbound HTTPS calls only.
What does it talk to? PlastiMind's relay only. The relay talks to Anthropic.
Does it work offline? Documents, search, the calculators and the shift-log tools all work with no internet. Asking Phil a question does not.
Is the installer signed? Not at the time of writing, so Windows SmartScreen may warn on first run. Ask PlastiMind for the SHA-256 of the ZIP if you want to verify what you received.
Can we self-host it entirely? Not currently. The relay is what protects PlastiMind's IP, and it is a shared service.
Something here not answered, or answered in a way that doesn't work for your company? Ask us — we would rather have the conversation before you buy than after.