Privacy Policy

Summary

We collect the name (and optionally city/employer) you give us to run a scan, your email to send you results and manage your account, and payment details handled entirely by Stripe. Running a scan means sending that identity information to third-party AI model providers to query them — that’s the core of what this product does, and Section 3 below explains exactly what that involves. We don’t sell your information. You can request deletion of your account and its data at any time.

1. Information We Collect

1. Identity information you provide: name, and optionally city and employer, submitted to run a scan. Monitoring subscribers may add further disambiguating context (e.g. additional past cities).
2. Contact information: your email address, used to send scan results, manage your account, and — where you haven’t opted out — send product/marketing communications.
3. Payment information: handled entirely by Stripe. We do not store your full card number.
4. Scan and report data: the exact prompts sent to AI models and the exact responses received, plus the classification assigned to each response. This is the core content of your report.
5. Usage/funnel data: a session identifier and basic event data (e.g. which page you viewed, which offer you started checkout on), plus standard technical data like IP address and browser information.

2. How We Use Your Information

1. To run scans and generate your report.
2. To process payments and manage your subscription, via Stripe.
3. To send you your results, account-related emails, and (unless you opt out) marketing communications.
4. To operate and improve the Service, including measuring which offers and pages perform well.
5. To detect and prevent abuse of the free scan (e.g. automated/excessive requests).

3. Third-Party AI Model Providers — the core of the Service

1. Running a scan means your submitted identity information (name, city, employer) is sent as a prompt to third-party AI models, currently including OpenAI, Google, NVIDIA, InclusionAI, Anthropic, either directly or through an aggregation service (OpenRouter). This is not incidental — it is the entire function of the product.
2. We do not control how these third parties process, retain, or otherwise handle information submitted to them as part of a query. Each provider’s own privacy practices govern their handling of that specific request. [REVIEW: confirm current data-handling terms with each active provider/ OpenRouter and link them here]
3. The responses these models return — including any information they state about you, whether accurate or not — are stored by us as part of your scan report (see Section 6, Retention).

4. Other Sharing

1. Stripe — payment processing.
2. CRM/marketing infrastructure — customer and subscription lifecycle data is synced to our CRM to manage your account and send account-related communications.
3. We do not sell your personal information to third parties for their own marketing purposes.

5. Cookies

1. We use a session cookie to connect your activity across the free-scan/checkout flow, and an authentication cookie to keep you signed in to your dashboard. We do not use third-party advertising trackers on the Service beyond what’s needed to measure ad performance for our own campaigns. [REVIEW: confirm final ad-pixel scope once Acquisition is live]

6. Retention

1. We retain your scan and report data for as long as your account is active, so you can refer back to past results, plus a limited period after account closure for legitimate business/legal purposes. [REVIEW: set a specific retention period]

7. Security

1. Account access is via a one-time magic link sent to your email rather than a stored password. We do not store payment card details ourselves. See our Trust & Security page for more detail.

8. Children

1. The Service is not directed to children, and we do not knowingly collect information from children under 13.

9. Your Privacy Rights

1. You may request access to, correction of, or deletion of your personal information, and may opt out of marketing communications at any time. [REVIEW: real request channel needed — see ROADMAP.md’s Contact page item; a product whose entire premise is helping people control their data footprint needs an unusually clean version of this]
2. California residents have additional rights under the CCPA/CPRA, including the right to know, delete, and opt out of sale/sharing of personal information — we do not sell personal information as defined by that law. [REVIEW: confirm with counsel]

10. Changes to This Policy

1. We may update this Privacy Policy from time to time; material changes will be reflected here with an updated date.

11. Contact

[REVIEW: real contact channel needed here — see ROADMAP.md’s Contact page item]