Privacy Policy
Baseline version 2026-05-epic-6
Consent
Require consent before non-essential analytics or marketing tracking. Essential session events may be collected for security and reliability.
PII redaction
Redact email addresses, phone numbers, access tokens, and free-form contact details from prompt and diagnostic logs before storage.
Retention
- Conversation snippets: 30 days
- Leads / contacts: Until customer deletion request or account termination
- Analytics events: 13 months
- Setup configuration: Lifetime of the project
Deletion
MVP deletion is manual: verify requester authority, export matching project/user identifiers, delete leads and analytics events, confirm completion to the customer, and record an audit note.
Ingested website content
Operators choose which sites and files to ingest. Cintesa stores embeddings and related project data to power that operator's agent experience. Operators remain responsible for lawful collection of those sources under the Terms of Service.