Privacy Policy

Information We Process

SansEntropy may process account information such as email address, display name, Firebase user ID, email verification status, subscription tier, quota state, Stripe customer identifiers, billing event metadata, account deletion status, and support correspondence.

The service also processes usage data needed to operate the product, including quota counters, model tier selections, retrieval results, provenance records, Coherence Ledger summaries, billing webhook records, and security logs.

Burn-and-Save Raw Transcript Handling

Raw chat text is processed temporarily in active model context to answer user prompts. SansEntropy servers do not intentionally store durable raw chat transcript records or server-side transcript backups.

At the token context ceiling or burn threshold, SansEntropy extracts a nonverbatim Coherence Ledger summary and destroys the raw transcript from active server processing. After a successful burn, the client is instructed to clear the local raw-chat cache.

Before a burn, your browser may temporarily store in-flight raw chat in local storage so a refresh, checkout redirect, or brief interruption does not destroy unsynthesized work. That cache is scoped to the signed-in user and is cleared on successful ledger extraction, sign-out, user mismatch, or explicit new-session discard.

Coherence Ledgers

Coherence Ledgers are abstract summaries saved under your user account. They are designed to preserve continuity without retaining verbatim transcripts. They may include core intent, gathered knowns, historical milestones, belief-index classification, prior-session carry-forward summaries, and token-count metadata.

You may have account tools for viewing, editing, or deleting account-scoped records as those features become available.

Account Deletion

When you request account deletion, we immediately terminate your authentication access and cancel any active subscriptions.

Your billing profile and payment history are permanently deleted from our payment processor.

Your account profile, including your display name and contact information, is permanently erased from our active database.

Your historical Coherence Ledgers are permanently decoupled from your identity and moved to an anonymous global aggregation pool.

We retain this anonymized ledger data exclusively to calculate global entropy trends, and it can no longer be linked back to you or recovered if you create a new account.

Anonymized Aggregation and Data Mining

SansEntropy may anonymize, de-identify, aggregate, transform, and analyze Coherence Ledger data for research, safety review, product improvement, machine learning, model evaluation, curriculum development, corpus prioritization, and operation of the Continuous Pattern Recognition Engine.

Anonymized aggregate data may be used to identify recurring user theories, common friction patterns, successful learning paths, retrieval gaps, macro-patterns, and product opportunities. SansEntropy will not intentionally publish anonymized aggregate outputs in a way designed to identify an individual user or reproduce a raw chat transcript.

PII Minimization and Re-Identification Barrier

SansEntropy aims to minimize personally identifiable information in Coherence Ledgers and aggregate analysis. The aggregation layer is intended to strip direct identifiers such as email addresses, Firebase UIDs, Stripe customer IDs, and other obvious account identifiers before product-level mining.

No anonymization method can be guaranteed perfect in every circumstance. SansEntropy will use reasonable technical and operational controls to reduce re-identification risk and will avoid intentionally reverse-engineering anonymized ledger aggregates to identify individual users.

Service Providers

SansEntropy relies on service providers to operate the product, including cloud hosting, Firebase Authentication, Firestore, Google Vertex AI or related model services, Stripe billing, and deployment or observability tooling. These providers process data as needed to provide their services.

Payment card details are handled by Stripe. SansEntropy receives billing metadata such as customer IDs, checkout events, subscription status, price IDs, and payment state; it does not intentionally store full payment card numbers.

Security and Retention

SansEntropy uses account authentication, email verification, scoped backend routes, Cloud Run access controls, and product-specific privacy architecture to reduce risk. No internet service can guarantee absolute security.

Account and billing records are retained for as long as needed to operate the product, comply with law, prevent abuse, resolve disputes, and maintain financial or security records. After account deletion, identity-linked account data is erased as described under Account Deletion; anonymized ledger aggregates may be retained for global entropy trends.

Children and Sensitive Use

SansEntropy is not intended for children. Do not use the service if you are not old enough to consent to these terms in your jurisdiction.

Do not submit medical records, therapy notes, government identifiers, financial secrets, credentials, third-party private data, or other highly sensitive information into prompts unless and until the product explicitly provides a governed feature for that use case.

Your Choices

You may choose not to create an account, not to submit prompts, not to purchase paid access, or to delete your account through available account tools. You may also clear browser storage for local in-flight chat data on your own device.

Questions about privacy or account deletion may be sent to admin@sansentropy.com.