Privacy Policy

Effective: 2026-05-23

Note for the operator: this document is a starting scaffold. Before opening the product to paying customers, review it with qualified legal counsel and update for the privacy regimes that apply to you (GDPR, CCPA, etc.).

Who we are

alterego ("we", "us", "our") operates the alterego service. This policy describes what information we collect, how we use it, and your rights.

Information we collect

We collect the following categories of information:

Account information — name, email address, and authentication identifiers (e.g. Google OAuth subject ID) when you sign up.
Workspace configuration — product brief, keywords, watched subreddits, voice profile, do-not-engage list, banned claims, and similar data you enter to configure discovery.
Generated content — research outputs, classified posts, draft replies, and reviewer decisions produced by the Service on your behalf.
Billing information — handled by Stripe; we store only the Stripe customer ID and subscription identifiers. We do not store credit card numbers.
Usage and operational logs — request paths, timing, error messages, and LLM call records (prompt, response, token counts, latency, cost) for reliability, cost accounting, and improving the Service.
Cookies — a session cookie ("access_token") for authentication; a CSRF cookie for form protection. We do not use third-party advertising trackers.

How we use information

To provide and operate the Service (discover, classify, draft, persist).
To bill you for paid plans via Stripe.
To communicate with you about your account, billing, and material changes to the Service.
To monitor reliability and detect abuse.
With your separate, opt-in consent, to use anonymized prompts and responses to improve our models. You can withdraw consent at any time via account settings.

Third-party services we share data with

The Service relies on the following third parties, who process data on our behalf or as independent controllers:

alterego proprietary models — prompts are processed by alterego's own trained models and approaches to generate classifications, drafts, and embeddings.
Payment processor — Stripe handles all payment data.
Infrastructure — Railway hosts our application; Postgres stores account, configuration, and operational data.
Search retrievers — Tavily (or alternative providers) receive search queries during research.
Social platforms — Reddit, Hacker News, and Bluesky receive read-API requests to fetch posts you have configured the Service to monitor.

We do not sell personal information.

Data retention

Account and workspace data is retained while your account is active. LLM call records (used for billing and reliability) are retained for at least 13 months. On account deletion, we remove personal account fields and disassociate configuration; some operational logs may persist in compressed form for legal, accounting, or fraud-prevention purposes.

Your rights

You may request:

Access — a copy of the personal data we hold about you.
Correction — to fix inaccurate or incomplete data.
Deletion — to delete your account and associated personal data.
Portability — to receive a machine-readable export of your data.
Objection / restriction — to object to or restrict certain processing.

Submit requests to alterego.intlabs@gmail.com. We respond within 30 days. If you are in the EU/UK, you also have the right to lodge a complaint with your local supervisory authority.

International data transfers

Our servers and many of our service providers are located in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

Security

We use industry-standard measures to protect your data: HTTPS in transit, encryption at rest for sensitive fields, and access controls on production systems. No internet-connected service is perfectly secure; we cannot guarantee absolute security. Notify us at alterego.intlabs@gmail.com if you suspect a security issue.

Children

The Service is not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe we have done so, contact us and we will delete the information.

Changes to this Policy

We may update this Policy from time to time. The "Effective" date above reflects the most recent revision. Material changes will be notified by email or in-product notice.

Contact

Privacy questions or requests: alterego.intlabs@gmail.com

alterego