What we keep
- Your account, team members and plan
- The names of AI tools and automations in your register, their owners, your decisions and the dates
- Counts from the browser extension: which listed AI sites were visited and how many warnings, blocks or masked pastes, per day, with a random device ID stored as a one-way hash
- Approval requests from your automations: the kind of action, the destination website, an amount band and a short note
- Documents you approve, such as your AI use policy, with their earlier versions
What we never keep
- The content of emails, files, chats or prompts
- What staff type or paste: paste checks run on their own computer
- Full web addresses or browsing history outside the listed AI sites
- Staff names in extension data, or any per-person ranking
- Passwords for the services you connect: connections use the provider's own sign-in, and keys are stored encrypted
How access is limited
- Each workspace can read only its own records (database row-level security).
- Connections to Google, Microsoft and n8n read only, unless you switch on an action and confirm it each time.
- Nothing is blocked, paused or changed without a decision by the workspace owner, and every decision is logged.
- Admin accounts use two-step sign-in; changes to the product go through reviewed pull requests and automated tests.
- A written incident plan for security events.
Providers that process data
| Provider | What for |
|---|
| Vercel, Inc.Hosting | Serves the website and runs the application. |
| Supabase, Inc.Database, sign-in and file storage | Accounts, application data and stored files. |
| Stripe, Inc.Payments and tax | Checkout, subscriptions, invoices, sales tax and fraud prevention. Stripe collects card details directly; we never see or store full card numbers. Stripe handles payment data it collects under its own privacy policy. |
| Anthropic PBCAI generation | Prompts and related context for AI features, including workflow outputs (assistant, generators, Prompt Lab, onboarding preview, AI Readiness Baseline, support-chat answers). |
| OpenAI, L.L.C.Support-chat search | The text of questions asked in the support chat, converted into search vectors to find relevant help articles. |
| Resend, Inc.Email delivery | Account emails and, if you opt in, our newsletter. |
| Google LLC (Google Workspace)Business email | Email you send to our addresses. |
| Google LLCSign in with Google | If you choose "Continue with Google," Google shares your name and email address with us. |
The Privacy Policy and Terms of Service are the full statement. This page summarizes them and is not a certification. Questions: info@techedanalyst.com.