Privacy Policy

1. What we collect

We collect and store:

• The research question you submit and the report generated from it, to show you results and to back the share link
• Your access key and its credit balance, purchase email, and which pack you bought, for billing
• A hash of your IP address (not the raw IP), for the free allowance and rate limiting
• Server logs (errors, request timestamps), for troubleshooting

2. What we do not collect

We never collect your card number, CVV, or any payment credential. Those go directly to Creem or PayPal and never touch our servers.

There are no advertising trackers, no cross-site profiling, and we sell nothing to anyone.

3. Retention

Data is deleted automatically on these schedules, with no request needed:

• Research reports: deleted 90 days after generation
• IP hashes and rate-limit counters: expire within 24 hours
• Webhook de-duplication records: 30 days
• Access keys and balances: kept until 24 months after the balance reaches zero, or until you ask us to delete them

4. Third-party processors

To run the Service your data is passed to the providers below, each under its own privacy policy:

• Vercel (USA) - hosting and server logs
• Browserbase (USA) - runs the cloud browsers
• Anthropic (USA) - processes page content and writes the summary. Under Anthropic's commercial API terms, API inputs and outputs are not used to train models by default
• Upstash (region of your choice) - stores balances and reports
• Creem (Merchant of Record) - processes card payments and emails your access key
• PayPal (USA / Singapore) - processes PayPal payments and emails your payment receipt
• Cloudflare (global) - Turnstile bot verification

5. Your input leaves your country

The providers above are mostly in the United States. By using the Service you understand and agree that your research question is transferred and processed across borders. Do not submit sensitive personal data, trade secrets, or anything you would not want a third party to process.

6. Report visibility

Report links contain a randomly generated, unguessable id. The links are not indexed by search engines (report pages are marked noindex), but anyone who has the link can read the report. Share accordingly.

7. Your rights

Email wangqiyuan@gmail.com at any time to access, correct, or delete the data linked to your access key. We act within 30 days. If you are in the EU or UK, you additionally have the GDPR rights to data portability and to object.

8. Children

The Service is not directed at anyone under 16 and we do not knowingly collect children's data.

9. Contact

For anything data-related, email wangqiyuan@gmail.com.