Privacy Policy

When you create an account we process your email address and the account identifier issued by our authentication provider, together with basic profile information you choose to provide. This is stored in our managed database so your account and your work can be recognised across sessions.

Account and authentication data is handled through Supabase / Lovable Cloud. If you sign in with Google or Apple, we receive the identity information that provider releases to us — typically an identifier and email address. We do not receive or store your password for those services.

The topics, questions, research prompts and follow-up messages you submit — including personal questions submitted to QMM — may be stored to provide the service, so that your work remains available to you.

Documents you upload as evidence (PDF, DOCX, TXT) are stored in private file storage that is not publicly listed, and the text extracted from them may be stored alongside the related examination. Extracted text may be transmitted for AI processing as context for that examination.

Examinations, follow-up conversations, implications and QMM observations generated for you are stored with your account. Where you explicitly choose to publish an examination, the published version becomes publicly accessible.

Payments are processed by Stripe. Card details are entered directly with Stripe and are not received or stored by Controvertist. We store the identifiers and status information needed to operate your access — for example customer and checkout session identifiers, subscription status and one-time purchase entitlements.

We store your current plan and entitlement state so the service knows what you have access to. This is updated from payment events sent by Stripe.

Controvertist does not currently implement product analytics, advertising pixels or third-party marketing trackers.

Standard hosting and infrastructure providers may process technical request information — such as IP address, browser and device characteristics and request timestamps — as necessary to operate and secure the service. Application errors may be recorded to diagnose faults.

We use first-party browser storage for limited functionality, including keeping you signed in, identifying an anonymous examination before an account exists, and carrying a referral reference where one is present. Stripe may set its own cookies within the checkout it provides.

Because no non-essential analytics or advertising trackers are currently used, no consent banner is presented. If that changes, this policy and the interface will be updated.

We rely on third parties to operate the service. These currently include Supabase / Lovable Cloud for authentication, database and file storage; Stripe for payment processing; the Lovable AI Gateway for AI processing; Inngest for the workflow and job data needed to run background research tasks; Google and Apple where you choose to sign in with them; and standard hosting and infrastructure providers. Transactional email related to your account is sent through our managed backend provider.

AI processing is routed through the Lovable AI Gateway and may involve underlying AI and model providers. Your submitted questions, extracted document text, research context and conversation context may be transmitted for AI processing. Providers and models may change as the service evolves.

We make no statement here about whether underlying AI providers use submitted content for model training; this has not been verified by us.

To retrieve supporting evidence, research queries derived from your topic may be sent to public data sources. Your account identity is not intentionally included in those queries.

Controvertist does not sell personal information.

Access to stored data is restricted at the database level so that records belonging to an account are readable only by that account or by privileged server-side operations. Uploaded documents are stored in private, non-public file storage. Traffic to the service is served over HTTPS. No system can be guaranteed completely secure.

No automatic retention or deletion schedule currently exists. Information is retained as reasonably necessary to provide the service, maintain records, comply with legal obligations, resolve disputes, enforce our agreements and protect the service. We do not commit to a fixed retention period.

You may delete certain stored content through the functionality available in the product. Deleting an item or an account does not necessarily remove every associated record from all systems, including backups and records kept for the purposes above.

Depending on where you live, you may have rights to access, correct, export, restrict or delete your personal data, and to object to certain processing. Some deletion is available directly in the product; other requests can be made through the contact channel below once it is published.

This policy may be updated as the service changes. Material updates will be reflected on this page.

A public contact address for privacy enquiries has not yet been published. This section will be completed with a verified contact channel.

See also the Terms of Use.