LAST UPDATED MARCH 2026
What Council AI collects, where it is stored, what leaves for AI providers, and the rights you can exercise over it.
Council AI stores your account details, your conversations and your usage in Firebase Firestore and Upstash Redis, both encrypted. Your prompts are transmitted to the AI providers whose models you selected so they can answer; prompt content is not stored in plaintext on our servers, and we do not sell personal information. EU/EEA users have GDPR rights and California residents have CCPA rights, both exercisable by email. Last updated March 2026.
We collect several types of information to provide and improve our Service:
We use collected data for the following purposes:
Your data is stored securely using industry-standard practices:
When you use Council AI:
We share data with limited third parties:
We do not sell your personal information to third parties.
We use only essential cookies necessary for the service to function:
We do not use tracking cookies, advertising cookies, or any third-party analytics
cookies that track your activity across websites.
For more details, see our
Cookie Policy
Under the General Data Protection Regulation (GDPR), EU/EEA residents have the
following rights:
Right of Access (Article 15): Request a copy of your personal data
Right to Rectification (Article 16): Correct inaccurate data
Right to Erasure (Article 17): Delete your data ("right to be forgotten")
Right to Restrict Processing (Article 18): Limit how we use your data
Right to Data Portability (Article 20): Receive your data in a machine-readable format
Right to Object (Article 21): Object to processing based on legitimate interests
Right to Withdraw Consent (Article 7): Withdraw consent at any time
To exercise these rights, visit Settings → Privacy or contact us at privacy@council-ai.app
Under the California Consumer Privacy Act (CCPA), California residents have the
following rights:
Right to Know: Know what personal information we collect, use, and disclose
Right to Delete: Request deletion of your personal information
Right to Opt-Out: Opt out of the "sale" of personal information (we do not sell data)
Right to Non-Discrimination: Not be discriminated against for exercising your rights
Categories of Personal Information Collected:
We Do Not:
To submit a request, email privacy@council-ai.app or use the Privacy settings.
We process your data under the following legal bases:
Contract Performance (Article 6(1)(b)):
Consent (Article 6(1)(a)):
Legitimate Interests (Article 6(1)(f)):
We use third-party services to process your data. These include AI providers
(OpenAI, Anthropic, Google, Mistral, etc.), infrastructure services (Firebase, Upstash),
and payment processors (Whop).
For a complete list of sub-processors, see our
Sub-Processors List
We retain your data for as long as necessary to provide the Service:
Council AI is not intended for users under 16 years of age (or 13 in jurisdictions
where permitted). We do not knowingly collect personal information from children.
If you believe we have collected data from a child, please contact us immediately
and we will delete it.
Your data may be transferred to and processed in countries outside your jurisdiction,
including the United States. For EU/EEA users, we rely on:
Some AI providers (DeepSeek, Qwen) may process data in China. Using these providers
requires your explicit consent due to different data protection standards.
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
Your continued use after changes constitutes acceptance of the updated policy.
For questions or concerns about this Privacy Policy or our data practices:
General Inquiries: privacy@council-ai.app
Data Protection Officer: dpo@council-ai.app
Data Subject Requests: Use Settings → Privacy or email privacy@council-ai.app
For EU/EEA users, you have the right to lodge a complaint with your local
supervisory authority if you believe your rights have been violated.