Privacy Policy

Effective Date: March 15, 2026

This Service is operated by Critical Thinking Labs, based in the United Kingdom.

We aim to collect the minimum personal data necessary to operate this Service.

1. Information We Process

We do not require user accounts.

However, we may process limited personal data, including:

• Pseudonymous analytics identifiers generated in your browser:
  • anonymous_id (stored in localStorage)
  • session_id (stored in sessionStorage)
• Basic usage analytics events (for example: session start, message sent, share/export actions, turn counts, latency, and token-count estimates)
• Technical and operational data processed by infrastructure providers (for example, IP address and browser/device metadata)

For analytics, we do not store or log conversation text, prompts, replies, transcripts, snippets, or embeddings.

2. AI Processing

Text entered into the chat interface is transmitted to a third-party AI provider via API to generate responses.

We do not manually review conversations.

Conversation text is used to generate responses, but is not stored in our analytics database.

We do not sell, rent, or trade personal data.

3. Local Browser Storage

This Service stores limited browser-side data including:

• Interface preferences (for example, day/night theme)
• A pseudonymous anonymous_id in localStorage
• A pseudonymous session_id in sessionStorage

Conversation content and conclusion artifacts are not saved to localStorage by default.

Any exported or shared content is only created when you explicitly trigger those actions.

4. Analytics

We use:

• Vercel Analytics for page/performance metrics
• A first-party analytics endpoint backed by Neon/Postgres for allowlisted product telemetry

Our analytics endpoint is designed to reject payloads containing common text-content keys and accepts only allowlisted event metadata.

5. Data Storage

We do not maintain a dedicated database of user conversation text for this Service.

We maintain an analytics events table that stores pseudonymous event metadata (for example, event name, timestamp, session/anonymous IDs, and numeric usage metrics).

However, third-party service providers (including hosting, analytics, and AI providers) may process or temporarily retain data in accordance with their own policies.

6. Legal Basis (UK GDPR)

We process limited technical data on the basis of:

• Legitimate interests (operating, securing, and improving the Service)

7. Your Rights

Under UK data protection law, you may have rights to:

• Request access to personal data
• Request correction or deletion
• Object to processing

To exercise your rights, contact: pr@iamshaeo.com

8. Changes

This Privacy Policy may be updated from time to time.