This Privacy Policy explains how Artisan Intuition ("we", "us", "our"), the operator of Model Council ("the Service"), collects, uses, stores, and protects your personal information. By using the Service, you consent to the practices described in this policy.

• Account information: When you register, we collect your email address, display name, and authentication credentials. If you sign in via Google or GitHub, we receive your name and email from those providers.
• Payment information: When you subscribe to a paid plan, payment details are processed by Stripe. We do not store your credit card number. We receive your Stripe customer ID, transaction history, and invoice records.
• Usage data: We store your council session prompts, model outputs, verdict data, and usage counts (credits used, preset requests consumed). Sessions are retained for 30 days.
• OpenRouter API keys: If you connect an OpenRouter key, it is encrypted at rest using AES-256-GCM before being stored in our database. The plaintext key is never stored.
• Analytics data: We use PostHog to track product events such as page views, feature usage, and conversion funnel steps. We do not send your prompt text or OpenRouter keys to PostHog.
• Marketing preferences: We collect your marketing email opt-in preference during signup.

• To provide and operate the Service, including processing your prompts through AI models via OpenRouter.
• To manage your account, authenticate your identity, and enforce usage limits.
• To process payments and manage subscriptions through Stripe.
• To send transactional emails (welcome, plan activation, cancellation notices, key management alerts) through Resend.
• To send marketing communications if you have opted in. You may opt out at any time.
• To analyse product usage patterns and improve the Service through PostHog analytics.
• To detect and prevent fraud, abuse, or violations of our Terms of Service.

• OpenRouter (openrouter.ai): AI model gateway. Your prompts and model outputs are sent to OpenRouter and the selected model providers to perform council runs. Their data retention and training policies apply to content processed through their services.
• Firebase (Google Cloud): Authentication and Firestore database. Your account data, usage records, and encrypted keys are stored in Google Cloud infrastructure.
• Stripe (stripe.com): Payment processing. Stripe handles all payment card data and provides billing management, invoices, and the customer portal.
• PostHog (posthog.com): Product analytics. Tracks anonymised usage events. No prompt content or API keys are sent to PostHog.
• Resend (resend.com): Transactional email delivery. Your email address and first name are shared with Resend to deliver product emails.
• Vercel (vercel.com): Hosting and deployment. The Service is hosted on Vercel's infrastructure.

• Your data is stored in Google Cloud (Firebase/Firestore) infrastructure. We use industry-standard security measures to protect your information.
• OpenRouter API keys are encrypted at rest using AES-256-GCM before being written to our database. Decryption occurs server-side in memory only when needed for a council request.
• We use HTTPS for all data transmission. Authentication tokens are verified server-side for every API request.
• Despite our security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

• Account data: Retained for as long as your account is active. You may request deletion by contacting us.
• Council sessions: Retained for 30 days from creation, then automatically expired.
• Payment records: Retained by Stripe in accordance with their data retention policies and applicable financial regulations.
• Analytics data: Retained by PostHog in accordance with their data retention policies.
• OpenRouter keys: Stored in encrypted form until you remove them or your account is deleted.

• The Service uses essential cookies for authentication session management (Firebase Auth).
• PostHog analytics may use cookies or local storage to track anonymised usage sessions. Analytics are optional and only active when configured.
• We do not use third-party advertising cookies or sell your data to advertisers.

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may update your account information through your profile page.
• Deletion: You may request deletion of your account and associated data by contacting us at support@modelcouncilai.com.
• Portability: Paid users may export their council session history as Markdown or PDF files.
• Opt-out: You may opt out of marketing emails at any time. You may remove your OpenRouter key at any time through your profile.
• If you are located in the European Economic Area (EEA), United Kingdom, or Australia, you may have additional rights under GDPR, UK GDPR, or the Australian Privacy Act. Contact us to exercise these rights.

Your data may be processed in countries outside your jurisdiction, including the United States (where Google Cloud, Stripe, and other service providers operate). By using the Service, you consent to these transfers. We rely on the data protection measures of our service providers to safeguard international transfers.

Model Council is not intended for users under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected data from a user under 18, we will delete that information promptly.

Do not submit secrets, passwords, private keys, regulated personal data, or confidential material through the Service. Prompts and model outputs are processed by OpenRouter and third-party model providers whose data handling practices are outside our control.

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or through the Service. Continued use after changes constitutes acceptance of the revised policy.

This Privacy Policy is governed by the laws of the State of New South Wales, Australia.

For privacy-related questions, data access requests, or account deletion requests, contact us at support@modelcouncilai.com.