Privacy Policy

Draft for legal review. Last updated 2026-10-08.

What we collect

• Account data: email, name, password hash, sign-in events.
• Conversation content: your questions and the answers produced, kept until you delete them.
• Model requests and responses: what each AI model returned, kept for 90 days for quality analysis, then deleted.
• Usage data: questions asked, levels used, timings, token counts and cost.
• Billing data: handled by Stripe; we store your Stripe customer id and subscription status, never card numbers.

How we use it

To answer your questions, enforce plan limits, prevent abuse, improve answer quality, and bill subscriptions. We do not sell personal data.

Third parties

Questions are sent to AI model providers (for example Anthropic, OpenAI, Google, xAI, and models reached through OpenRouter) and, for web evidence, to a search provider. Each processes data under its own policy. Long-tail models are routed to providers that do not retain data where the routing service offers that option.

Retention and deletion

You can delete conversations from your history and delete your account from the account page. Server logs are kept 30 days. Records required for tax and accounting are kept as the law requires.

Security

Secrets stay on the server. Sessions use secure, HTTP-only cookies. Access to the admin area is limited to named administrators and audited.

Contact

Questions about privacy: use the contact address on the Tizit website.