Privacy Policy

1. Who is responsible

Chartorum LLC operates chartorum.com and the Chartorum Service and is responsible for the personal information described here. Support, privacy, billing, and legal contact: support@chartorum.com. Mailing address, if required: [OWNER TO SUPPLY].

2. Information Chartorum processes

Chartorum minimizes ordinary registration data. It does not require a name, date of birth, home address, phone number, or demographic information to create a Chartorum account. Clerk requires and manages the email address and password used for authentication. Paddle may separately request transaction and billing information when an adult purchaser opens checkout.

• Account and authentication: a stable Clerk user identifier, verified-email status, role, account timestamps, and the current 16+ eligibility-policy version and declaration timestamp. Chartorum does not store the selected age band, birth date, or identity document. Clerk handles your email address, password, verification, recovery, and session data; Chartorum's product database does not store your password or email address.
• Discovery content: discovery titles; format and canonical seed-card identities; original strategy descriptions and immutable revisions; interview messages and AI responses; confirmed strategy; recommendations and explanations; Keep, Maybe, or Pass decisions; notes; and archive status.
• Operation and AI usage: durable job states, failure details, provider request identifiers, token counts, estimated or actual cost, usage reservations, and entitlement records. These records include billable failures and ambiguous outcomes when needed for accounting and duplicate-call prevention.
• Trial and billing: trial-claim status; the purchaser-authorization policy version, acknowledgement timestamp, owner, and bound checkout reference; Paddle customer, transaction, and subscription references; subscription status and period; cancellation scheduling; webhook event receipts; and refund or chargeback access state. Chartorum does not receive full payment-card details.
• Technical information: ordinary request metadata such as time, route, status, IP address, user agent, security events, and service logs may be processed by Chartorum's hosting and network providers. Product API logs are designed not to record strategy request bodies.

3. How information is used

Chartorum uses information to authenticate users; isolate each account's data; provide interviews and discovery; preserve revisions and player decisions; enforce trials, subscriptions, usage, and spending limits; prevent duplicate provider calls; secure and troubleshoot the Service; reconcile billing; respond to support and legal requests; and comply with law.

The legal basis may be performance of the user agreement, Chartorum's legitimate interests in operating and securing the Service, consent where required, and compliance with legal obligations. [OWNER/COUNSEL TO CONFIRM LAUNCH JURISDICTIONS AND LEGAL BASES].

4. AI processing

When you request an interview, strategy interpretation, or discovery, Chartorum sends the information needed for that request to OpenAI through its API. This can include your strategy text, interview turns, confirmed intent, selected card identities, canonical card text, and bounded execution context. Do not include unrelated personal or confidential information.

Chartorum requests that API responses not be stored for product state where supported. OpenAI may nevertheless retain abuse-monitoring logs for a limited period, and background responses are temporarily retained so Chartorum can poll a submitted response without issuing a duplicate billable request. OpenAI's own data controls and legally required retention apply.

5. Service providers and disclosures

• Clerk: registration, verified email, login, recovery, and session security.
• Paddle: merchant of record, checkout, tax/payment handling, subscription management, refunds, and disputes.
• OpenAI: AI interview and discovery processing.
• Cloudflare: frontend delivery, DNS, and network protection.
• Railway and managed PostgreSQL: API, worker, database, logs, and backups.

Chartorum may also disclose information when required by law, to protect rights and security, during a business transaction subject to appropriate safeguards, or with your direction. Chartorum does not currently use product analytics or session recording and does not sell personal information or share it for cross-context behavioral advertising.

6. Free workspace, browser storage, and downloads

The free workspace requires no account and makes no Chartorum API or AI call. It loads a packaged card catalogue and stores deck names, formats, notes, card selections, and its active-deck identifier in your browser's local storage. Imported discovery or deck JSON is read in the browser. That local workspace data is not sent to Chartorum by the application.

You can delete a local deck in the workspace or clear the site's data in your browser. Exported recommendation and deck JSON files are saved where your browser or device chooses; Chartorum cannot locate, update, or delete those downloaded copies.

7. Cookies and similar storage

Clerk uses cookies or similar browser storage to maintain and protect signed-in sessions. Paddle may use its own storage during checkout and billing management. The free workspace uses local storage as described above. Chartorum does not currently include advertising trackers or product-analytics cookies.

8. Retention, archives, and deletion

Chartorum preserves immutable strategy revisions, confirmed intent, discovery evidence, decisions, job history, provider-call accounting, trial claims, entitlements, and billing-event receipts. This supports reproducibility, account isolation, abuse prevention, spending reconciliation, and billing integrity. Database backups may retain records for a separate operational period.

Current limitation: no general production retention duration has been selected, and the current release does not provide self-service deletion of a hosted discovery or Chartorum account. Archiving a discovery is reversible and does not delete its data. Deleting a Clerk login does not by itself establish deletion of Chartorum's product or billing records. Chartorum must implement and test a verified request process and publish final retention periods before public launch.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to appeal or complain to a regulator. To make a request, contact support@chartorum.com. Chartorum may need to verify your identity and may retain information where law or legitimate fraud, security, accounting, or dispute needs require it.

Because the verified deletion workflow is not yet implemented, public launch is blocked until Chartorum can receive, authenticate, execute, and document these requests.

10. Security and international processing

Chartorum uses signed sessions, verified-email enforcement, owner-scoped authorization, exact allowed origins, encrypted HTTPS transport in deployment, server-side entitlements, and provider-secret isolation. No system is completely secure. Providers may process information in countries other than yours; applicable contractual and legal safeguards must be confirmed for launch markets.

11. Children

Chartorum is a general-audience service. The public free workspace does not require an account, makes no Chartorum API or AI call, and keeps workspace data in the visitor's browser as described in Section 6. Visitors under 16 may use only that public workspace, subject to applicable privacy requirements.

You must be at least 16 to create or use a registered Chartorum account. Ordinary registration does not require a date of birth or identity document. Registered users ages 16 and 17 may use eligible free discovery features. If a registered user is a minor, a paid subscription must be purchased by an adult who has reached the age of legal majority where they live, or by another person with legally sufficient authority to purchase for the user.

Current control: before registration collects account information, Chartorum presents a neutral age-band choice and directs an under-16 visitor to the public workspace. Protected account operations require a current server-stored 16+ declaration. Before Chartorum creates a Paddle checkout, an unchecked adult-purchaser or legally sufficient authority acknowledgement is required and stored with the authenticated owner and checkout. These declarations are contractual safeguards, not identity-grade age verification.

Chartorum does not operate a verifiable-parental-consent process and does not offer registered accounts to users under 16.

If Chartorum learns that a registered user is under 16, it will restrict the account and address the associated information as required by applicable law. Questions about age eligibility may be sent to support@chartorum.com.

12. Changes and contact

We will update the effective date when this policy changes and provide additional notice when required by law. Questions and requests may be sent to Chartorum LLC at support@chartorum.com.