Privacy Policy

Data We Collect

This is a demo environment built to showcase a conversational AI platform. We collect only what is necessary to make it work:

• Email address — used to send a one-time verification code and to identify your account across visits. We do not send promotional emails.
• Name and stated purpose — entered once on your first visit; used only to personalize the experience.
• Chat messages — stored in our database to provide conversation memory within your sessions.
• Uploaded files — PDFs and images you submit are temporarily stored on the server; their extracted text is indexed in our database for context retrieval. Files may be removed at any time.
• YouTube URLs — the audio track of videos you share is transcribed and stored so the assistant can reference it in conversation.
• Token usage — a count of AI tokens consumed per session is recorded to enforce a fair daily quota.
• Browser fingerprint (soft) — a non-identifying signal used only to detect quota bypass attempts. Never linked to your personal identity or stored in logs.
• IP address — held in memory for rate limiting only. Not written to any log or database.

We do not use analytics platforms, tracking pixels, or advertising cookies of any kind.

Third-Party Services

To deliver the AI experience, your inputs are processed by the following external services. Each has its own privacy policy:

• OpenAI — powers AI responses, image analysis, and audio transcription. Your messages and files are sent to their API.
• Brave Search — handles web search queries from the assistant. Your search input is sent to their API.
• WolframAlpha — handles math and science calculations from the assistant. Your query is sent to their API.
• YouTube Data API (Google) — retrieves video metadata when you share a YouTube link.
• Resend — delivers the one-time verification code to your email inbox.
• Supabase — hosts the database. Your messages, uploaded content, and session data reside here.
• Railway — hosts the application server. Uploaded files are stored here temporarily.

No data is ever sold to third parties or used for advertising.

Data Retention

This is a demonstration environment, not a production service. Data is retained on a best-effort basis and may be cleared by the administrator at any time without prior notice — for example, to reset the demo, reduce storage costs, or decommission the environment.

Your verified session cookie is valid for 30 days. When it expires, you can re-verify your email to recover your previous conversation history.

Uploaded files (PDFs, images) stored on the server may be automatically purged after a period of inactivity. The extracted text embeddings in the database are retained as long as the demo is active.

Cookies

We use a single, strictly necessary cookie to maintain your verified identity across visits. It is an HMAC-signed session token tied to your verified email address, with a 30-day expiry.

This cookie is HttpOnly, Secure, and SameSite=Strict. It cannot be read by JavaScript and is not accessible to third-party scripts.

We do not use analytics cookies, advertising cookies, or any third-party tracking cookies. There are no tracking pixels on this site.

Contact & Data Deletion

This demo is built and operated by Rodney Dhavid Jiménez Chacín. If you have any questions about how your data is handled, or if you would like to request deletion of your account and associated data, please send an email to:

Deletion requests are handled manually. Include the email address you used to verify your identity and we will remove your data as soon as possible.