Privacy

1. Who is responsible

The controller is Alpha Rebuild Ltd, UIC 205152708, registered at j.k. Drujba 274, 1000 Sofia, Bulgaria. For any question about your personal data: [contact and privacy email].

2. What we process

Account: email, name (optional), a hash of your password (never the password itself), interface language. If you sign in with Google: your Google account identifier, email, name and profile picture address.

"About me" (optional): what you do, preferred level of detail and style, country, what to leave out, and a short AI-written "how we understand you" text.

Topics and sifts: your topic descriptions and schedules, the generated sifts (headlines, summaries, links to sources), when you opened or listened to a sift, and feedback you give.

Audio: when you press Listen, the sift text is turned into speech; the recording is kept for 30 days and then deleted automatically.

Account emails: invitation links (valid 14 days) and password reset links (valid 1 hour, deleted once used or expired); only a fingerprint of each link is stored. Technical data: your sign-in sessions (valid for 30 days, then deleted), IP addresses in server logs (up to 14 days), and cost records of generation without content.

No payment data: there are no payments during the beta.

3. Purposes and legal bases

To provide the service — preparing and delivering your sifts, reading them aloud and tailoring them to your description (performance of a contract, Art. 6(1)(b) GDPR).

Security, abuse prevention and cost control — limits, logs, backups (legitimate interests, Art. 6(1)(f) GDPR).

We do not use your data for advertising, we do not sell it, and we do not make decisions with legal or similarly significant effects about you.

4. Artificial intelligence

Sifts are prepared automatically with language models. To do so, your topic description, the sources found, your "about me" description and your recent feedback on sifts of that topic are sent to our AI provider. Under its commercial API terms, Anthropic does not use this data to train its models.

Summaries can contain errors or omissions. They are an information overview, not legal, financial, tax or medical advice — check the sources before acting.

5. Who we share data with

Only with service providers (processors) the service cannot run without, and only as much as needed:

Anthropic (USA) — generating sifts; Tavily (USA) — web search based on your topic description (without your email); ElevenLabs (USA) — text to speech, only when you press Listen; Resend (processing in the EU, Ireland) — sending sift emails; Hetzner (Germany) — hosting and encrypted backups; Google (USA) — sign-in with Google, if you choose it.

Transfers outside the EU rely on the European Commission's standard contractual clauses or an adequacy decision (EU–US Data Privacy Framework), where applicable.

6. How long we keep data

For as long as you have an account. When you delete your account on the Profile page, your account, topics, sifts, "about me" description, feedback and recordings are deleted immediately.

Encrypted database backups rotate automatically and are gone within 8 weeks. Cost records remain without content and without your email.

7. Cookies and local storage

We use only necessary cookies: your session, your language, protection of the Google sign-in (10 minutes), the one-time welcome (5 minutes), and remembering a chosen view and dismissed hints. Player speed and volume are stored only in your browser.

There are no advertising, tracking or analytics cookies, so we do not show a consent banner.

8. Your rights

You have the right to access, rectify and erase your data, to restrict or object to processing, and to data portability. You can do most of this yourself on the Profile page (edit and delete); for the rest, write to [contact and privacy email].

You can lodge a complaint with the Bulgarian Commission for Personal Data Protection (www.cpdp.bg) or the supervisory authority where you live.

9. Security

Connections are encrypted (HTTPS), passwords are stored only as hashes, servers are in the EU, and backups are encrypted with a key that is not kept on the server.

10. Age

The service is not intended for people under 16.

11. Changes

If this text changes materially, we will tell you in the service or by email. The date of the last change is shown above.