Privacy Policy

Last updated: July 26, 2026

1. Information we collect

Account information. Your email address, display name, and authentication metadata (e.g. sign-in provider).

Session content. The questions you ask, materials you upload, senator deliberations, Chief Senator compilations, edits, votes, tags, metadata, and export history.

Bring-Your-Own-Key data. API keys you link to your account are encrypted at rest using AES-256-GCM before being stored. We keep only the first and last four characters as a display hint.

Safety reports. If you submit a Trust & Safety report, we store the category, description, optional contact email, related session (if any), and moderator triage notes.

Notifications. In-app notifications tied to your account (e.g. safety report status changes).

Technical data. Log data such as IP address, browser/user-agent, and timestamps for security, abuse prevention, and diagnostics.

2. How we use information

• To provide the Service: run deliberations, save sessions, generate exports, and deliver notifications.
• To authenticate you and secure your account.
• To triage safety reports and enforce our Terms of Use.
• To improve reliability and diagnose issues.
• To communicate service-related updates (e.g. status changes on your safety reports).

We do not use your session content, uploaded materials, or personal information to train third-party foundation models, and we do not sell your personal information.

3. Third-party AI providers

When you run a deliberation, we send your prompt to the AI provider(s) whose keys you have linked (e.g. OpenAI, Anthropic, Google). Those providers process the request under their own privacy policies. We recommend reviewing each provider's policy before linking a key.

4. Service providers

We use a small set of processors ("subprocessors") to operate the Service. Each only processes data on our behalf under contractual confidentiality and security obligations:

• Lovable Cloud (managed Supabase) — application hosting, database, authentication, and file storage. Data centres in Canada, the United States, and the European Union.
• Lovable AI Gateway — routing of prompts to free-tier AI models where you have not linked your own key. Prompts are not retained for training.
• Lovable Email — transactional email delivery (safety-report status updates, test emails).
• Stripe, Inc. — payment processing for paid plans (see Section 5 below). We do not receive or store your card details.
• Third-party AI providers you link (e.g. OpenAI, Anthropic, Google) — each processes your prompts under their own privacy policy when you choose to link an API key. See Section 3.

5. Payments

Paid subscriptions are processed by Stripe, Inc. Card details are entered directly into Stripe's secure fields and are never seen or stored by Senate of AIs™. We store only the information needed to grant your plan (Stripe customer ID, subscription ID, plan, status, and billing period) and the sandbox vs. live environment flag. Stripe's own privacy notice governs its processing of your card and billing data.

6. Cookies and similar technologies

Senate of AIs™ uses only strictly necessary cookies and local storage — no advertising, analytics, or cross-site tracking cookies are set. Specifically:

• An authentication token from our auth provider, stored in your browser so you stay signed in.
• A small cookie that remembers whether the app sidebar is collapsed.
• Local preferences (e.g. draft autosave, chosen deliverable) so your work is not lost on reload.

Because these are essential to operating the Service you requested, no cookie consent banner is required in most jurisdictions. You can clear them at any time from your browser settings; doing so will sign you out.

7. Data retention

We keep account and session data for as long as your account is active. When you delete a session, it is removed from your active workspace; backups are purged on a rolling 30-day cycle.

Safety reports are retained for up to 24 months for audit purposes, then deleted or anonymized. Encrypted API keys are deleted immediately when you unlink them.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can:

• Update your profile from the Profile page.
• Delete individual sessions from the dashboard.
• Unlink AI provider keys from the Senators page.
• Delete your account yourself at any time from Profile → Delete your account. This permanently removes your profile, sessions, opinions, uploaded materials, encrypted API keys, notifications, and senator assignments.
• Or email us at privacy@themarcusinstitute.ca for a data-access, correction, or complaint request.

9. Security

We protect data with encryption in transit (TLS) and at rest, role-based access controls, row-level security on our database, and regular security reviews. No system is perfectly secure — please choose a strong password and report any suspected vulnerability to us right away.

10. Children

The Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. International transfers

We are based in Canada and our processors may store or process data in Canada, the United States, and the European Union. Where required, we rely on appropriate safeguards such as standard contractual clauses.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, notify you in the app or by email.

13. Contact

For privacy questions, data-access requests, or account deletion, email privacy@themarcusinstitute.ca.

The Marcus Institute™ — Ontario, Canada.