Privacy Policy

Effective date: May 13, 2026

This policy explains how this app handles personal information when you register with your email, join the waitlist, and use the chat experience.

1) Information We Collect

• Email address and account identifier from Supabase authentication.
• Encrypted authentication credentials handled by Supabase during sign-in/sign-up.
• Account activity timestamps (for example, last sign-in time).
• Registry status data needed to operate access limits (active, waitlist, inactive).
• Chat request content sent through this app to provide answers.
• Basic local browser settings required for app operation (for example model preferences and Supabase client config).

2) Why We Use This Information

• To enforce a capped registry (up to 100 active users at one time).
• To maintain a waitlist when active slots are full.
• To release inactive slots after 14 days and promote users from the waitlist.
• To send a warning email around day 10 of inactivity so users can keep access.
• To deliver and improve chat responses.

3) Automated Access Management

A scheduled background job runs daily. It checks inactivity windows, sends warning notices, marks stale accounts inactive after 14 days, and promotes waitlisted users when capacity opens.

4) Service Providers

We use third-party services to run the app:

• Supabase for authentication and registry data storage.
• Netlify for hosting and serverless function execution.
• OpenAI for chat completion processing.
• Resend (or equivalent email provider) for inactivity and promotion emails.

Your data is processed by these providers according to their terms and privacy policies.

5) Data Retention

We retain registration and registry records as needed to run access control, waitlist management, security, and basic operational reporting. We may delete or anonymize data that is no longer required.

6) Your Choices

• You can stop using the app at any time.
• You can request deletion of your account and related registry record.
• If you receive an inactivity warning, logging in before day 14 keeps your active slot.
• You can clear browser-stored settings at any time by clearing local site storage.

7) Security

We use reasonable administrative and technical safeguards, but no method of transmission or storage is guaranteed to be 100% secure.

8) Contact

For privacy questions, requests, or deletion inquiries, contact: nnoble@ithaca.edu.

9) Policy Updates

We may update this policy from time to time. The effective date at the top indicates the latest version.