legal

Privacy Policy

Last updated: 13 August 2026

1. Summary

We collect as little as the Service can function on. We do not sell personal data. We do not use your inputs to train models.

2. What we process

• Briefs you submit. The text you type into a tool is transmitted to Anthropic’s API to generate a response, and is returned to your browser.
• Analyses you generate. If you are signed in, your analyses are stored in our database so you can retrieve them. If you are not signed in, they are stored only in your own browser and never leave your device except to generate the response.
• Account data. If you sign in, we store your email address and an account identifier. Authentication is passwordless: a one-time link is emailed to you.
• Published links. If you press Share, the analysis you chose to publish is stored and becomes readable by anyone holding the link. Do not publish confidential material.
• Operational logs. Our host records standard request metadata (IP address, user agent, timestamp) for security and reliability.

3. What we do not do

We do not sell or rent personal data. We do not serve behavioural advertising. We do not use your submitted content to train any model, and our inference provider is instructed not to use API traffic for model training.

4. Processors

• Anthropic — model inference on submitted briefs.
• Vercel — hosting, edge delivery and request logs.
• Supabase — authentication and database storage, if this deployment is configured with it.

5. Retention

Saved analyses are retained until you delete them or delete your account. Browser-stored history is retained until you clear it — the “clear” control in the account panel removes it immediately. Published links persist until deletion is requested.

6. Your rights

Depending on where you live, you may have rights of access, correction, deletion, portability and objection under laws such as the GDPR or the CCPA. To exercise them, write to privacy@acetate.si. We will respond within the period required by applicable law.

7. Security

Traffic is encrypted in transit with TLS. Database access is protected by row-level security so that a signed-in user can read only their own records. API keys are held as server-side environment variables and are never exposed to the browser. No system is perfectly secure; do not submit material you cannot afford to have disclosed.

8. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data.

9. International transfers

Our processors may store and process data in jurisdictions other than yours, including the United States, under appropriate safeguards.

10. Changes

We will post any change to this policy on this page and update the date above.

11. Contact

privacy@acetate.si