Privacy Policy

1. Information We Collect

We collect the following information when you use Problem.Cockpit:

• Account information: email address and name, provided at signup.
• Session content: conversation transcripts including problem statements, AI responses, and excavation outputs.
• Usage metrics: token counts, session counts, and feature usage data for billing and service improvement.
• Payment information: processed by Polar. We do not store credit card numbers, bank account details, or other payment credentials on our servers.

2. How We Use Information

• Provide and operate the excavation service, including processing your conversations through AI.
• Track token usage for billing and enforcing monthly usage limits.
• Send transactional emails: magic link authentication, team invitations, and welcome messages.
• Improve the service based on aggregated, anonymized usage patterns.

3. Third-Party Processors

Your data is processed by the following third-party services:

• Anthropic — AI processing. Your problem statements and conversation content are sent to the Claude API for generating responses.
• Polar — Payment processing. Handles subscription billing and invoicing.
• Resend — Transactional email delivery. Sends magic links, invitations, and welcome emails.
• Neon — Database hosting. Session data and account information are stored in Neon-managed PostgreSQL on AWS infrastructure.
• Vercel— Application hosting. The web application is deployed and served through Vercel's infrastructure.

4. Data Storage

Session data and account information are stored in Neon PostgreSQL hosted on AWS (us-east-1 region). All data is encrypted at rest and in transit using industry-standard TLS encryption.

5. Data Retention

• Active accounts: your data is retained for as long as your account remains active.
• Terminated accounts: your data remains available for export for 30 days after account termination, after which it is permanently deleted.

6. Your Rights

• Export your session data at any time through the application.
• Request account deletion by contacting support. Your account and all associated data will be removed within 30 days.
• EU users (GDPR): if you are located in the European Union, the General Data Protection Regulation applies. Our lawful basis for processing is contract performance. You have the right to access, rectify, and erase your personal data. To exercise these rights, contact us at the support email below.

7. Cookies

Problem.Cockpit uses a single session cookie for authentication purposes. This cookie is httpOnly and secure. We do not use analytics cookies, advertising cookies, or any third-party tracking cookies in version 1 of the service.

8. Changes

This privacy policy may be updated from time to time. We will notify you of material changes via the email address associated with your account. Continued use of the service after changes take effect constitutes acceptance of the revised policy.