Privacy Policy

Data processed

Values entered in the calculator are kept only in the user’s browser storage for temporary restore. They are not stored in the server database.

API keys entered for AI use are not stored in the server database. They are encrypted into a 24-hour HttpOnly cookie and decrypted server-side only when processing an AI request.

AI chat history is not stored in the server database. It is kept only for the browser session and may be deleted when the AI session or browser session ends.

Server database scope

The public-reference RAG database is used only for reference vectors and metadata, with a read-only role in production. User accounts, API keys, chat history, and calculator data are not stored in that database.

Optional AI response ratings are stored only in the separate feedback database described below. It does not share the RAG database or its access role.

Optional AI response feedback

If a user presses the helpful or not-helpful button beside a completed AI answer, the service sends the rating and any selected predefined reason codes, assistant workflow, locale, fixed model and harness identifiers, completion class, coarse response-length range, and a random response identifier to a separate feedback database. Both the rating and reason selection are optional.

The feedback request and feedback database row do not include the question, answer text, free-form comments, response memo, Structural Summary values, API key, account identifier, IP address, or user agent.

To limit repeated-request abuse, the service stores only a one-way session key derived with a server secret from the random identifier inside the encrypted AI session, together with request counters. These records expire within 24 hours. Rating save, change, and delete requests are limited to 10 per minute and 60 per AI session.

Automated abuse protection at the hosting edge may temporarily use an IP address or connection characteristics to limit short bursts of requests. The application does not store that information in the feedback database.

Pressing the selected button again during the current browser session removes that rating and its reason codes. Feedback metadata expires after no more than 180 days, and expired records are removed in bounded batches.

External AI providers

When a user requests an AI response, prompt text, current chat context, relevant calculator output, and reference-document context may be sent to OpenAI.

Processing by OpenAI is governed by OpenAI’s terms and privacy policy. Users should review those policies before using the AI features.

To limit excessive repeated AI chat requests, the app temporarily keeps only a one-way session key derived from the encrypted AI session’s random identifier and recent request timestamps in server runtime memory for up to one hour. IP addresses, chat content, and API keys are not included in this record or stored in a database.

Retention and deletion

The BYOK cookie lasts for up to 24 hours. When the user ends the AI session, the cookie and temporary chat state are cleared.

Calculator data stored in the browser remains until the user clears it or browser storage is removed.

Contact

For service, error, or security questions, contact mow.coding@gmail.com.