Security & Privacy
Your writing is yours. Always.
You entrust us with your writing — your voice, your thinking, your creative work.
We take that seriously. Here is exactly how we handle your data.
🔒
TLS 1.3 encryption in transit
🛡
AES-256 encryption at rest
🇪🇺
GDPR compliant
🚫
Never sold. Never shared.
What we store
◈ Voice Profiles
Your voice description, refinements, and corrections. These are the building blocks
of your voice model. Stored encrypted, accessible only to your account.
↑ Uploaded Writing Samples
Files you upload to train your voice. We process them to extract patterns,
then store the processed profile data. You can delete your uploads at any time.
⚖ Council Deliberations
Questions you ask the council and the responses generated. Ordinary Council
deliberations are cached briefly to avoid redundant API costs, then retained
only if you save them. Voice-contextual Council judgments are saved to the
relevant voice profile as part of its judgment history.
What we never do
- Sell or share your writing samples, voice profiles, or personal data with third parties
- Use your writing to train our models or any third-party models
- Store your raw writing permanently after voice extraction unless you choose to keep it
- Access your voice profiles without your authentication
- Share your data with advertisers or analytics companies
- Retain ordinary council deliberations beyond their caching window unless you explicitly save them
AI processing & third parties
Voice analysis and council deliberations are processed through the configured
AI provider for the service, currently OpenAI or Anthropic depending on deployment
configuration. These API providers do not use API prompts or responses for model
training unless explicitly opted in. Your prompts and responses are processed
in real time and subject to the provider's standard API retention window.
We do not use any other third-party AI services, analytics platforms,
or tracking tools that access your writing content.
Data encryption
All data transmitted between your browser and our servers is encrypted using
TLS 1.3. Data at rest is encrypted using AES-256. Our infrastructure is hosted
on Render, which provides SOC 2 Type II certified environments.
Your rights
- Access: View all data we hold about you at any time through your account
- Portability: Export your voice profiles in full using the Export feature
- Deletion: Delete your voice profiles, writing samples, or entire account at any time
- Correction: Update or correct any personal information through your account settings
- Objection: Contact us to object to any data processing
Account security
Passwords are hashed using bcrypt with per-user salts. We support secure session
management with JWT tokens. We never store plaintext passwords or send them
over unencrypted connections.