Privacy Policy
Effective Date: February 15, 2026
This policy explains what data is processed in the current BYOK-only architecture. The core principle is that user accounts, API keys, chat history, and calculator data are not stored in the server database.
Data processed
Values entered in the calculator are kept only in the user’s browser storage for temporary restore. They are not stored in the server database.
API keys entered for AI use are not stored in the server database. They are encrypted into a 24-hour HttpOnly cookie and decrypted server-side only when processing an AI request.
AI chat history is not stored in the server database. It is kept only for the browser session and may be deleted when the AI session or browser session ends.
Server database scope
The server database is used only for public reference-document retrieval (RAG). User accounts, API keys, chat history, and calculator data are not stored in the server database.
Production runtime should use the minimum DB permissions needed for reference retrieval.
External AI providers
When a user requests an AI response, prompt text, current chat context, relevant calculator output, and reference-document context may be sent to the selected provider, such as OpenAI or Google.
Processing by the external provider is governed by that provider’s own terms and privacy policy. Users should review the policies of the API provider they choose.
Retention and deletion
The BYOK cookie lasts for up to 24 hours. When the user ends the AI session, the cookie and temporary chat state are cleared.
Calculator data stored in the browser remains until the user clears it or browser storage is removed.
Contact
For service, error, or security questions, contact mow.coding@gmail.com.