Privacy.

I — Data we collect

In full, what we hold about you is:

• Your account. The email address you sign up with, your plan and credit balance, and the security records that keep the account yours: your sign-in sessions and any password reset you request.
• What you create. The boards you assemble, the personas on them and the notes those personas keep, the topics you put to a board, and everything the deliberation produces: contributions, rounds, reports and the follow-up questions you ask of a report. It also covers what you record afterwards: the decision you reached and the commitments you list against it, including any name or due date you type onto one, any later review you write of how that decision turned out, the risks you keep on a board's register, including any name or review day you put on one and the note you write when you close it, and the figures a board watches, with any unit, target and dated reading you record against one, the note you write when you retire it, and which of them you say a decision was meant to move.
• What you upload. The documents you add to a knowledge base, the files themselves as well as their names and sizes, the search index built from their contents, and a reusable copy of that index, shared between accounts, so identical text never has to be processed twice.
• What you do here. A record of actions taken on your account. Each entry carries the action, when it happened, the IP address you connected from and the browser you used. Alongside it we keep the milestones you reach, the features switched on for your account, errors your requests run into, and any moderation flag you raise or that is raised about something you wrote.
• What you spend. Every movement of your credit balance, what caused it, and the balance it left behind. Alongside it, a record of each time you start a purchase: which package, the price you were quoted, and what our payment provider last told us about it, whether or not the payment ever completed.
• What you write to us. Anything you send through the contact form, and the address you ask us to answer on, both kept for 180 days from the day you send them and then removed, whether or not you have an account with us.

II — Why we collect it

We collect what the council needs to deliberate, and what running the service safely requires.

We do not sell your data and we do not train shared models on it.

III — How we store it

Data lives in af-south-1 (Cape Town). LLM requests are routed to Anthropic via a regional proxy. Backups are encrypted and retained for 30 days. See data residency for specifics.

IV — Who can see it

What you create, what you upload and what you spend are readable from your own account and from no other.

Our staff can open an account when they have permission to. Both the opening and the closing of that view are written to the record of actions listed above, so it is visible in the copy of your records you can download.

A deliberation is sent to the model provider to be answered, and mail we send you goes out through a mail provider. The data residency page names both, the region each runs in, and the day that was last confirmed.

V — Your rights

You can export all your data (GDPR/POPIA DSAR) or delete your account from the Account Settings page. Deletion triggers a 7-day grace period followed by an irreversible cascade through every owned record.

One thing survives that cascade: a trimmed record of the actions taken on the account, holding what was done and when, kept for seven years to comply with R-1-10. The fuller trail described above, the one carrying the IP address and the browser, is erased with everything else.

VI — Contact

Every control this notice describes is in Account settings, so exercising a right above takes no message to us.

For anything else, including a correction those controls cannot make, an objection, or a complaint, our contact form reaches us and needs no account. What you write there, and the address you give us to answer on, are kept for 180 days from the day you send them and are then removed, whether or not you have an account; if you are signed in when you write, they are also part of the copy you can download and they go in the erasure with everything else, which can take them sooner.

Mail we send you comes from an address nobody reads, so a reply to it reaches no one. Use the form.

VII — Cookies

What we keep in your own browser, and what each one is for:

• Keeping you signed in. Written when you sign in and cleared when you sign out. Without it every page would ask you to sign in again.
• Light or dark. Written only when you press the theme control yourself, so the next page you open is already in the theme you picked.
• The answer below. What you pressed and the day you pressed it, kept for 12 months. It is what stops the notice coming back on every visit.

None of them is placed by another company, none follows you to other sites, and none is used for advertising. We run no third-party analytics or advertising tags on any page here.

Your answer is recorded either way, and you can change it as often as you like. Nothing in the list above is switched off by refusing: the first two are how the site works and how it remembers what you asked for, and the third is the answer itself. What a refusal stands as is your position on anything beyond that list.

The answer is kept in this browser, so a different browser or a different device asks you again.