Privacy Policy

1.1 Personal Information You Provide

When you register for an account or use our Service, we collect:

• Account Information: Name, email address, profile picture (via Google OAuth)
• Payment Information: Billing address, payment method (processed securely by Stripe — we never store card details)
• Content Data: Projects, argument nodes, sources, notes, research queries, and other content you create using our Service
• Community Content: Posts, replies, votes, and comments you submit to the community forum or blog

1.2 Information from Third-Party Services

• Google OAuth: Basic profile information (name, email, profile picture)

1.3 Automatically Collected Information

• Usage Data: Features used, research queries made, AI features accessed
• Device Information: Browser type, operating system
• Log Data: IP address, access times, pages viewed
• Cookies: Session cookies for authentication and preferences (theme, sidebar state)

1.4 AI-Processed Content (Optional Features)

If you choose to use the optional AI-enhanced features (available on paid plans), the following data may be sent to AI models for processing:

• Stance text and argument structures (for decomposition)
• Research queries (for finding evidence)
• Node content (for strength/weakness analysis)
• Source URLs and titles (for enrichment)

2.1 Service Provision

• Provide and maintain your account
• Process subscriptions and manage billing
• Generate AI-powered argument analysis and research findings
• Store and organize your projects, sources, and notes
• Operate the community forum and blog

2.2 Service Improvement

• Improve AI analysis quality and accuracy
• Develop new features based on usage patterns
• Debug issues and improve system performance

2.3 Communication

• Account notifications and security alerts
• Subscription and billing information
• Service updates and feature announcements

2.4 Safety and Moderation

• Enforce community guidelines
• Detect and prevent abuse, fraud, or security threats
• Comply with legal obligations

3.1 Service Providers

We share data with trusted third parties who assist in operating our Service:

• Stripe: Payment processing and subscription management
• Supabase: Database, authentication, and storage services
• Anthropic (Claude): AI model processing for argument analysis, research, and enrichment
• Vercel: Website hosting and infrastructure

3.2 Community Content

Content you post to the community forum (posts, replies) is visible to other authenticated users. Blog comments are visible to all visitors.

3.3 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3.4 Legal Requirements

We may disclose information when required by court orders, legal processes, or to protect our legal rights and prevent fraud.

• Encryption: TLS/SSL for all data in transit
• Access Controls: Row Level Security (RLS) for data isolation between users
• Authentication: Secure OAuth-based authentication via Supabase
• Infrastructure: Hosted on Vercel and Supabase with enterprise-grade security

In the event of a data breach, we will notify affected users within 72 hours and provide guidance on protective measures.

• Active Account Data: Retained while your account is active
• Payment Records: Retained for 7 years for legal compliance
• Account Deletion: You can delete your account from Settings — all associated data (projects, nodes, sources, notes) is permanently deleted via cascading deletion

• Access: View your data through the Settings page and project workspace
• Correction: Update your profile information in Settings
• Deletion: Delete your account and all data from Settings
• Opt-Out: You can opt-out of non-essential cookies through browser settings

We use only essential cookies:

• Authentication cookies: To keep you signed in
• Preference cookies: Theme (light/dark), sidebar state, canvas preferences — stored in localStorage, not sent to servers

We do not use tracking cookies, analytics cookies, or advertising cookies.

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at brenfurtado@gmail.com.

Your information may be transferred to and processed in the United States where our servers are located. We ensure appropriate safeguards through compliance with applicable data protection laws.

California residents have the right to know what personal information is collected, request deletion, and opt-out of data sales (we do not sell data). We will not discriminate against you for exercising privacy rights.

We process your data based on consent (for optional features), contract (to provide the Service), legitimate interests (for improvement and security), and legal obligations. EU users have the right to lodge complaints with supervisory authorities.

We may update this Policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email or notice on the Website. Continued use after updates constitutes acceptance.

For questions about this Privacy Policy:

Email: brenfurtado@gmail.com

Website: https://rebuttalbase.com