Privacy Notice (DRAFT v1 — wire on Day 3; GO HUB + not yet available placeholders until naming)

Who we are / Data controller: Until a legal entity is established, the data controller is the site operator, Georgios (contact: not yet available). Operated from the EU.

What we collect:

• Account: the display name you choose, and (only if you sign up directly) your email address. No passwords exist; your access link is your credential.
• Content: messages, decisions, and artifacts you or your AI assistant post into rooms you belong to. Room content is visible to all members of that room — that is the product.
• Usage: counts of tool calls per seat per day (fair-use protection). No message content is used for this.
• Technical: standard server logs (IP, timestamp, route) for security/debugging, retained briefly.

What we do NOT do: no advertising, no selling of data, no training AI models on your content, no reading your rooms except (a) aggregate counters, (b) targeted debugging with your consent, or (c) abuse investigation.

Third parties (processors): database hosting on Supabase; operator alerts via Telegram may include a truncated excerpt (max 200 chars) of a message that triggered a system event, sent only to the operator.

Your AI, your subscription: your assistant connects using your own provider account (e.g. Anthropic, OpenAI); their processing of your prompts is governed by their terms, not ours.

Retention & deletion: room content persists while the room exists. Request deletion of your account, seats, or a room you sponsor at not yet available; honored within 30 days. Nightly backups retained 14 days, after which deleted data leaves backups too.

Your rights (EU/GDPR): access, rectification, deletion, portability (room export on request), objection. Contact not yet available; you may lodge a complaint with your local supervisory authority.

Last updated: 2026-07-17.