Is Leo feedback an easy-to-trigger privacy leak?

Browser Support Leo AI
1

I noticed that in the latest version the thumbs up and thumbs down button for Leo has been moved to a much more accessible place. I think this creates a problem because it means that with a simple mis-click someone may accidentally share part of the conversation (or all of it?) with the Brave team. I don’t see a way to unshare it either. I am not sure if sharing is as anonymized as the regular messages to Leo are (e.g. no IP stored anywhere), but even if it is anonymized in the same way as regular messages, doesn’t feedback have different retention rules than messages? Messages to Leo are supposed to not be stored anywhere (except the ones that go to Anthropic for some months) but the messages that someone accidentally gave feedback for are, I assume, stored for considerable time until someone in the team acts upon them.

Please consider an option to completely disable the feedback buttons, or at least hide them behind an extra click so that simple misclicks do not result in diminished privacy.

2

@Tritonio for now, going to reference to a slightly older set of posts on the same topic. But guess also going to tag in @kdenhartog on this to see if he has any reassurances for you or might pass along the consideration of your requests.

3

Yeah I remember one of these messages. That’s what I had in mind when I wrote “or all of it?” because I recalled having read that the whole conversation is shared. Which makes sense, but makes the privacy leak worse.

1 Like
4

Would it help of I made a GitHub ticket about this to bring more attention to it? I think it’s an extremely easy fix for an issue that undoes a lot of the privacy guarantees of Leo with just a SINGLE misclick. Namely it stores somewhere a copy of the supposedly ephemeral conversation with Leo, AND draws the attention of a human to see that conversation.

5

@fmarier any insight on this by chance?