Privacy policy

What we collect

Your email address, used to sign you in with a magic link and to send you the emails listed below.

The idea text, answers and optional context you submit for a scan or a report, and the reports we produce from them.

Purchase records: what you bought, when, and the payment reference. Card numbers never reach us.

If you create an API key for the MCP connection, the key hash and when it was last used.

Server logs with IP address and browser type, kept for security and debugging.

Who processes it for us

Supabase (United States region) stores accounts, ideas, reports and purchase records, and sends the magic-link email.

Anthropic receives your idea text and report drafts to produce the research and the grade. Anthropic's commercial terms exclude using this data to train models.

Dumpling AI runs the web searches and page reads the research agents ask for. It receives the search queries derived from your idea, not your account details.

Creem is the merchant of record for every purchase. Creem collects your payment details and billing address under its own privacy policy; we receive a confirmation and the email you paid with.

GetTerms hosts the cookie consent banner and this site's cookie policy.

Emails we send

Sign-in links, purchase confirmations and the result of a re-check you asked for. We do not send marketing email and do not share your address with advertisers.

Public reports

A report is private to your account until you turn on its share link. With the link on, anyone who has the link can read that report, including the idea text in it. You can turn the link off at any time from the report page.

Example reports on this site are shown with the consent of their owners.

Cookies

We set the cookies needed to keep you signed in and to remember your cookie choice. We do not use advertising cookies. If we add an analytics tool later, it will run only after you accept it in the cookie banner. See the cookie policy for the current list.

Keeping and deleting data

Reports stay in your account so re-checks can compare against them. Delete a report or your whole account from Settings, or write to us; we remove the data within 30 days, except purchase records we must keep for tax and accounting.

Your rights

You can ask for a copy of your data, a correction, or deletion. Residents of the EU, UK, California and other regions with privacy laws have the rights those laws give them; we honour them for everyone.

Contact: TODO(ask): legal contact email. Mail: Rad Rebel Enterprise LLC, United States.

Changes

When this policy changes we update the effective date above and, for material changes, email account holders.