Privacy policy

What we collect

Your account: the email address or Google account you sign in with, kept by Clerk and read by us when needed. We keep the account number, the internal identifiers we give your account and cx's computer, the identifier Clerk gives your sign-in, your invitation code, and when you signed up.

Your content: your conversations, the files you upload, the files cx makes for you, and the name and notes you give cx in Settings.

The accounts and keys you connect: your own model API keys and data-source credentials, stored encrypted, used only to make the calls, and never shown again.

Usage and payments: the amount, time and purpose of each charge and top-up; a record of each data-source call, with what was asked and its parameters, each item's outcome, what the source said back, and the usage and price. Card and Alipay details are handled by Stripe, and we keep no card number; to stop an invitation reward being claimed twice, we keep a summary of the payment method that cannot be turned back into it.

How we use it

Only to provide and improve ComChatX: to run cx and cx's computer, call the models and data sources you choose, charge for them, prevent abuse and answer your emails. We do not sell your personal information or use your content for advertising.

Who processes your data

To provide the service, these providers process part of it: Clerk (sign-in), Stripe (payments), Fly.io (runs cx's computer and the platform, in Singapore), Cloudflare (stores your files and conversations, in Asia-Pacific) and Supabase (database, in Singapore). When cx calls a model for you, what it needs is sent to that model's provider (through OpenRouter, or on your own key); when it calls a data source, the query is sent to that source, such as Keepa.

How long we keep it

While your account exists, your content is kept. You can ask cx in the conversation to delete files; a deleted file cannot be recovered.

Deleting your account

Write to [email protected] from the email address you sign in with, and we delete your account. It stops working at once; we cancel your subscription, destroy cx's computer and its disk, delete your files, conversations, connected keys and data-source data, and last your sign-in account. Deleting from our storage is immediate and cannot be undone.

For accounting and to prevent abuse we keep: the record of each charge and top-up; the record of each data-source call (see “Usage and payments” above); the account number, the internal and sign-in identifiers, the invitation code, and when the account was made and deleted; and the payment-method summary. Database backups are kept 7 days, then deleted by themselves.

Cookies

The app at app.comchatx.com uses only the cookies sign-in and invitations need. This website uses no cookies and no tracking.

Your rights

Write to [email protected] to see, correct or delete your personal information; we act on it once we have checked it is you.

Changes to this policy

When we change this policy we update this page and its date; an important change is told to you in advance, in the app or by email.