Privacy Policy

What we collect

• Account information — name, email address, and a securely hashed password. We never store your password itself.
• Your messages and the AI’s replies — the full content of every conversation, stored so your threads remain available when you return.
• Routing and usage data — which type of request each message was, which AI model answered it, how long each stage took, and token counts, used to bill usage and operate the product.
• Technical data — your IP address, used to enforce rate limits, verify you’re in a supported region, and detect abuse.

Third parties who process your messages

To answer your messages, arbiter sends their content to one of several third-party AI providers — currently Anthropic, Google, OpenAI, Perplexity, DeepSeek or Moonshot AI, depending on which is best suited to the request. Each provider processes that content under its own privacy and acceptable-use terms in addition to ours. We do not sell your data to anyone.

Automated safety screening

Every message is checked by an automated, local screen before it’s sent to any AI model. Messages that appear to involve child sexual abuse material are blocked and reported to the National Center for Missing & Exploited Children (NCMEC) as required by law. Messages that appear to express thoughts of self-harm are flagged internally so the response can include crisis resources — this flag records that the screen fired, not a copy of what you wrote.

How long we keep data

Account and conversation data is retained until you delete it. You can delete any conversation from its menu, and you can delete your whole account from the Account page: that removes your account, every conversation and message, every uploaded file and generated image including the stored copies, and cancels any active subscription. Deletion is immediate and there is no recovery period. A few things remain afterwards, each for a stated reason:

• Anonymised usage records. Token counts and provider cost per turn, with no account or message attached — the ledger the service's own provider bills are reconciled against. They hold no content and no identifier.
• Workspace audit entries, anonymised. In a corporate workspace with other members, the rule label, destination and time of each policy event stay as the workspace's compliance record. The entry no longer names you.
• Provider incident records. Operational notes about outages at the model providers. They were never linked to an account.
• Financial records at Stripe. Invoices and payment history are retained by Stripe under its own obligations. The subscription itself is cancelled.
• Backups and platform logs, for a limited time. Database point-in-time backups and hosting logs age out on their own schedules rather than being purged on the spot.

Your rights

Depending on your state of residence, you may have rights to access, correct, or request deletion of your personal information under laws such as the CCPA/CPRA. Deletion is self-service from the Account page, as described above. For access or correction requests, contact us directly at [CONTACT EMAIL].

Children’s privacy

arbiter is offered only to people 18 or older and is not directed at children. We do not knowingly collect information from anyone under 18.

Changes to this policy

We may update this policy as the product changes. Material changes will be communicated through the product before they take effect.

Contact

[Company name and contact address to be added.]