DRAFT — for review by counsel before launch.

Privacy Policy

What we collect

Your email and sign-in identities; the ideas and answers you give during intake; the Blueprints we deliver; chat messages with the assistant; billing records (handled by Stripe — we never see card numbers); and basic technical data (IP address, browser) used for security and rate limiting.

Who processes it

Stripe (payments), Supabase (database, authentication, file storage), Vercel (web hosting), Fly.io (generation workers), Resend (email), Anthropic and OpenAI (the models that interview, design and audit). Each processes data only to provide its part of the service.

How long we keep it

Intake transcripts (not purchased)7 days for anonymous intakes; while your account is open otherwise
Blueprints and their research bundlesWhile your account is open; deleted 30 days after closure
Chat messagesUp to 12 months while open; deleted on closure
Purchase and subscription records7 years (tax), with your email replaced by a hash after closure
Payment-provider event payloads90 days
Security audit log1 year

Your rights

You can export your Blueprints at any time and close your account from Settings. To access, correct or delete personal data, or to object to processing, email privacy@[domain]. EU/UK residents may also complain to their supervisory authority.

Cookies

We use only strictly necessary cookies: your sign-in session and, for anonymous intakes, a random key that lets you return to your interview. No advertising or analytics cookies.

Contact

privacy@[domain]