Privacy Policy

When you log in to this platform, we collect basic information (such as your email address and public display name) through Google OAuth to create your account and perform identity verification.

The platform stores and manages general documents, Spec documents, QA test case documents, Project Documents, versions, comments, external resources, custom templates, user preferences, and onboarding demo state. Access is controlled by account, collaborator, and project permissions.

In addition, after analytics consent is granted, this platform may collect usage behavior data through third-party analytics tools (see Section 03) to improve service quality.

This platform uses the following cookies. Cookies are small text files stored in your browser to identify user sessions or remember preferences.

You can manage or delete cookies through your browser settings. Disabling cookies may affect the normal operation of some features on this platform.

This platform uses cloud services and HTTPS to protect data transmission. We use Supabase Row Level Security (RLS) and application-level permission checks to protect documents, projects, versions, comments, external resources, custom templates, user preferences, and AI key records from unauthorized cross-account access.

When you use AI-assisted features, the platform server reads your stored API key and sends only the content needed for that feature to your configured AI service provider (Gemini, OpenAI, or Claude). AI writing assistance may use current document context or selected content; QA generation uses compressed Spec content only when the user explicitly enables the LLM option; Role Review reads only the current Spec document and does not read the whole project, external resources, split-view documents, comments, or links; Spec Change Plan is available only for editable Project Specs and, after the user enters a proposed change or explicitly sends one comment into the change description, reads the current Spec and that change request only. It does not read the whole project, QA files, all comments, anchors, links, external resources, or version history, and it does not save results; Reader Brief reads only the selected published Spec version; Folder Q&A reads only visible, non-deleted documents in the selected folder after you submit a question and returns source documents. Each user's per-folder Q&A history is saved under their account until they clear it, including source-document snapshots for answers so older answers can be flagged as stale. Please refer to each AI provider's privacy policy to understand how they handle data. Your API key is not returned to your browser at any point in this process.

Under applicable privacy laws, you have the following rights regarding your personal data:

• Right to Access: You may request confirmation of whether this platform holds your personal data.
• Right to Deletion: You may request deletion of your account and associated document data.
• Right to Opt Out of Tracking: You may use the Google Analytics Opt-out Browser Add-on to disable GA4 tracking, or clear Microsoft Clarity cookies via your browser settings to stop session recording.

To exercise any of the above rights or for any privacy-related inquiries, please contact us through the platform's provided contact channels.

This Privacy Policy may be updated periodically to reflect changes in our business practices or legal requirements. For significant changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify users via in-platform announcements. We encourage you to review this page regularly to stay informed of the latest content.