Privacy Policy
Last updated: October 2, 2026. This notice describes the current test service.
Data we process
We store account details, profile information, conversations, research goals, generated reports, sources, task status and Credits accounting records. Supabase handles authentication and database storage. Passwords are handled by Supabase Auth; application logs must not contain passwords or authentication tokens.
Third-party processing
Model requests and relevant conversation or research context may be sent to Jinchao or APIMart. Research searches send relevant queries to Tavily. Web Search providers receive search terms; do not submit secrets or information you are not authorized to share. Hosting providers also process information needed to operate the service. Provider-specific data retention and processing terms must be reviewed before public launch.
Use, retention and deletion
Data is used to provide requested outputs, maintain sessions, prevent abuse and reconcile usage. Logs should contain operational identifiers and safe error codes rather than complete prompts. There is currently no self-service account deletion feature. Operator contact details, a deletion-request process and retention periods must be published before public launch. We do not promise that third-party data can be removed immediately.
Current limitations
Payments, subscriptions and file uploads are not implemented. This notice does not claim security guarantees or provider retention settings that have not been verified.