Privacy notice: operator approval required

This is a technical disclosure draft, not an approved legal policy. Legal operator identity, contact address, jurisdiction, retention schedule and subprocessors must be approved before public launch.

Data used

Authentication uses your email and encrypted session cookie. Database projects contain prompts, domain/brand configuration, provider answer evidence and optional feedback. Prompts are sent to OpenAI only on an explicitly activated run; response storage at OpenAI is requested disabled, subject to its own account policy.

Retention and deletion

Readiness cache expires after one hour but database cleanup is operator-managed. Shared reports expire after 30 days and can be revoked. Project deletion cascades runs and learning records. Account deletion, backups retention and data export remain operator-assisted prerequisites, not implemented account-settings features.

Optional analytics

Analytics are off by default and may be opted in or withdrawn using the consent control. Autocapture, session replay and automatic page URLs are disabled. Private prompts, audited domains, emails and repository URLs are excluded from product event payloads.

No marketing outreach

No automated outreach. Email alerts are not available in this preview. No private prompt panels or evidence are automatically published. Sharing requires explicit consent and discloses only readiness category scores.

Contact: operator identity and support address pending approval. Do not submit confidential content during preview.