Privacy Policy

Effective Date: March 29, 2026 | Last Updated: March 29, 2026

1. Information We Collect

Account Data: Email address, display name, hashed password, subscription tier.

Usage Data: Queries submitted, council sessions, agent interactions, API usage metrics.

API Credentials: Third-party API keys you provide (Anthropic, OpenAI, Google, Mistral) — stored encrypted.

Payment Data: Processed by our payment provider (Stripe). We do not store credit card numbers.

Marketplace Data: Agent listings, reviews, purchase history.

2. How We Use Your Data

• To provide and improve the Service
• To process your council queries and store session history
• To manage your subscription and enforce tier limits
• To facilitate marketplace transactions
• To send service-related communications
• To detect and prevent abuse

3. What We Do NOT Do

• We do NOT train AI models on your query content
• We do NOT sell your personal data to third parties
• We do NOT access your third-party API keys except to make API calls on your behalf
• We do NOT log the content of your API key values after initial storage

4. Data Storage and Security

Passwords: bcrypt hashed (never stored in plaintext).

API keys (yours): SHA-256 hashed. The full key is shown once at creation and never again.

Third-party API keys: Stored with encryption at rest.

Session data: Stored in our database, accessible only to your account.

5. Data Retention

Account data: Retained while your account is active. Deleted within 30 days of account deletion.

Query history: Retained for 90 days, then automatically purged.

API logs: Retained for 30 days for debugging and abuse detection.

6. Your Rights

You may: access your data, request deletion, export your data, update your information, and withdraw consent for optional processing. Contact [email protected].

7. Third-Party Services

When you use third-party models (Anthropic, OpenAI, etc.), your query content is sent to those providers subject to their privacy policies. When using the platform default (Qwen 3 8B), queries are processed on our own infrastructure.

8. Cookies

We use minimal cookies: a JWT authentication token stored in localStorage (not a cookie). No third-party tracking cookies.

9. Contact

Privacy inquiries: [email protected]

Back to Meta Council