VoiceLake UC Analytics plugin privacy notice

Version 1.0.0. Effective September 8, 2026. Published with Metropolis approval.

This notice covers the VoiceLake UC Analytics plugin for ChatGPT and Codex and the Metropolis-operated MCP service behind it. It supplements the Metropolis privacy policy at https://www.metropolis.com/privacy-policy.php. OpenAI's handling of your ChatGPT or Codex account and conversations is governed by your agreement with OpenAI.

Information processed and purpose

Metropolis processes Microsoft Entra authorization data, encrypted connection state, and tenant and user claims to authenticate you and keep connections isolated. For analytics, the service processes your selected Power BI semantic model, date boundaries, row limits, requested metrics, and the results returned by Power BI. An exact user name may be processed as a query filter when you request that workflow; it is present in the request handled by OpenAI and sent to Power BI for filtering. The connector does not retrieve your full conversation history or user files.

The plugin returns aggregates and operational labels. It does not provide raw call records, phone numbers, email addresses, or direct user and customer identifiers in analytics responses. Model display names, queue and location labels, and opaque model references are shared with OpenAI to support authorized model selection and analytics. These labels may contain information supplied by your organization. Metropolis processes this information to answer your requests, enforce access permissions, secure the service, and provide support. Metropolis does not use plugin analytics results for advertising or model training.

Storage and retention

The connector does not persist analytics query inputs or result bodies. It stores encrypted authorization and refresh state to maintain connections, subject to token expiration. Opaque model references expire after 24 hours. Disconnecting the plugin does not constitute a request to delete all stored authorization state; contact Metropolis support to request deletion of remaining state.

Operational logs record request status and performance information, such as timestamps, tool names, durations, row counts, and diagnostic correlation references. Application logging excludes authorization tokens, query text, and analytics result bodies. The production Azure Log Analytics workspace has a 30-day retention setting.

Service providers

Microsoft Azure hosts the service. Microsoft Entra authenticates users and Microsoft Power BI executes authorized queries. OpenAI receives your prompts, tool calls, and returned content as part of using the plugin. The connector's retention statements do not determine how long OpenAI retains conversations or how long your organization retains data in Microsoft services. Metropolis does not sell plugin analytics data.

Your controls

You can disconnect VoiceLake in ChatGPT or Codex. You can revoke the Microsoft application grant at https://myapplications.microsoft.com or ask your tenant administrator to remove it. Contact Metropolis support for privacy questions or requests to delete remaining connector authorization state. Power BI and Fabric permissions determine which models you can access.

Security and contact

The service uses HTTPS, delegated Microsoft authorization, encrypted authorization state, bounded queries, and minimized results. Privacy and deletion requests: https://www.metropolis.com/support.php.