The essentials, short. The long version – and the one that binds – is in the privacy policy, which reads top to bottom in ten minutes.
What we keep
- From your account: your name, your email and the date you accepted the legal notice and the privacy policy.
- From your organisation: what you fill in under My organisation – registration details, fields of work, territories, the groups you support, budget, team. That is what the fit is worked out from.
- What you upload: documents, projects and narratives.
- From billing, if you are on a paid plan: the Stripe identifiers and the payment history. Card details never pass through our servers.
Who else sees it
It is not sold and it is not passed on to anyone. Only four suppliers process it on our behalf, and each one sees the part it needs: Resend sends the emails, Stripe charges for the plans, Anthropic provides the artificial intelligence model and OVHcloud hosts the servers and the file store.
For how long
The account and the profile, for as long as the account is open. Sessions, thirty days at most. Invoices, six years, and that period cannot be shortened: it is in deleting your account.
There is no analytics and there are no trackers: no Google Analytics, no social media pixels, no heat maps. The only cookies used are the ones the site needs to work, and that is why there is no cookie banner to accept either.
You exercise your GDPR rights – access, rectification, erasure, objection, restriction and portability – from Contact, choosing “My data or my account”. It is free and we reply within one month. The emails we send come from a send-only address, so replying to them doesn't reach anyone.