Privacy Policy
Last updated: March 6, 2026
1. What we collect
When you sign in with Google or GitHub, we receive your email address and name from the OAuth provider. We store this in our database (Supabase, hosted in Tokyo) to manage your account and subscription.
We log each deliberation run — the timestamp and your user ID — to enforce daily usage limits. We do not store the content of your questions or the AI responses.
2. API keys
Free tier users supply their own OpenRouter API key. This key is stored only in your browser's local storage and is never sent to our servers.
Pro tier users use our hosted key. API requests are proxied through our server and forwarded to OpenRouter. We do not log the content of these requests.
3. Payments
Payments are processed by Stripe. We do not store your card details. Stripe's privacy policy applies to payment data.
4. Third-party services
- Supabase — authentication and database
- OpenRouter — AI model routing
- Stripe — payment processing
- Vercel — hosting
Each service operates under its own privacy policy.
5. Data retention and deletion
You can delete your account at any time by contacting us at the address below. We will delete your account data within 30 days.
6. Contact
Questions? Email us at terry@consilium.sh