draft, not yet reviewed by a lawyer
We store what you type so that your run works and your link keeps working. We delete it after 90 days. You can delete it sooner. After that we keep only an anonymous record with nothing you typed in it, unless you tick the box that lets us keep a copy with names and details removed. We do not sell it, and we do not hand it to the advertisers.
The description you write, the state you pick, and the answers you choose. There is no account and we do not ask for your name. We do not store your IP address against your run.
What you write is often sensitive. People describe being fired, evicted, injured or defrauded. Please do not include names, account numbers, or medical details. The tool does not need them to be useful.
We also count visits, which is where the visitor numbers on the home page come from. A page load is stored as a one-way hash of your IP address and browser, salted with a secret we hold and re-salted every midnight — so the hash cannot be turned back into an IP address, and the same reader on two days is two unrelated entries. It records no page address, which makes it a count of people rather than a record of what anyone read. It is not a cookie and it is not tied to your run.
Separately, we count how many times each page is opened and how many times each topic on the home page is tapped. Each of those is a total for the day, with no visitor in it, so it cannot show what any one person read or tapped. We use it to put the topics people pick most at the top.
Your run is private. It has an unguessable address and it is not listed, indexed, or linked from anywhere. Sharing the link is the only way another person sees it. Anyone with the link can see it and delete it, so treat it like a password.
Advertisers receive nothing. They cannot see what you typed, they cannot target you, and their slots do not change based on your situation.
What you typed is never shown on the site. Once your run is finished we may write one short, generalized line about the kind of situation it was, such as "Can I sue my landlord for keeping my deposit over normal wear?", and show it with your state in the strip of recent questions on the home page. That line leaves out names, businesses, places, numbers and anything that could point to you, and some kinds of story are never described at all. It is stored with your run and deleted with it.
The address you type is used to send that one message and is not saved. There is no list, no second email, and nothing to unsubscribe from. We do not store it against your run, because a run is not tied to anyone and an address filed beside it would be exactly that.
What we do keep is a count, so the button cannot be used to post mail to strangers. It is a one-way hash of the date, a secret we hold, and the address, which means it cannot be turned back into an address and the same inbox is an unrelated entry the next day. The count is all it can answer: how many summaries went to that inbox today.
The message travels over the internet like any other email, and it contains the summary. If your inbox is one other people can read, send yourself the link instead.
Resend, in the United States, delivers the message on our behalf and sees the address and the summary in order to do it.
Your description is sent to Anthropic's API to generate the summary. The site and database are hosted on Vercel and Neon in the United States. If you ask for the summary by email, Resend delivers it.
Google Tag Manager runs on the public pages and reports those visits to Google, which sets cookies and receives your IP address. It never receives what you typed, and it does not run on your verdict page.
Ninety days from the day you run it, then it is deleted permanently. A job runs once a day and deletes every run that has passed ninety days. It deletes what you wrote, your answers, the questions, the summary and the one-line description. Shared links stop working at that point too.
One anonymous record, so that the counts on the home page stay true and so that we can see which kinds of problems people bring. It holds the kind of claim, the state, the month, the language, which legal requirements the summary found met or unresolved (by name only), whether the deadline looked open, how many questions were asked, the page and website you arrived from, and any dollar figure a statute produced.
On its own it holds nothing you typed, no answers, no link to the run and no exact date or time. It cannot be matched back to your run or to you. It is kept whether the run was deleted by you or at ninety days.
At the end of a finished run there is a box: "Let us keep this run to improve this tool." It is not ticked unless you tick it. If it is still ticked when the run is deleted, we keep a copy of what you wrote, the questions and your answers, and the summary, with the anonymous record above.
Before a copy is kept, names of people and businesses, places smaller than a state, calendar dates, contact details and account or case numbers are replaced with a label such as [NAME]. Anthropic's model finds them and our code replaces them, and our code also removes anything that looks like an email address, phone number, link or long number. Dollar amounts, deadlines and the law cited stay. If the details cannot be removed, nothing is kept.
The copy has no link to your run and no exact date. It is never shown on the site and never given to advertisers. You can untick the box at any time while your run exists. Once the run is deleted, the copy cannot be found or removed, because nothing ties it to you.
Every finished run has a delete button at the end of its page, and it takes effect immediately. It cannot be undone. If you have lost the link there is nothing we can look up for you. The run is not tied to you in any way, which is the point.
Questions, or a deletion you cannot do yourself: privacy@canisue.app