Privacy Policy

Last updated 2026-05-14.

This is the short version: we process public tweets you click Read this debate on. Everything else is opt-in or opt-out from a toggle in Settings. The long version follows.

1. What we collect

• Account data: email address (used to send you sign-in links), tier, account creation timestamp.
• Analyses: the public tweet content you ask us to analyse, the AI-generated debate map, and metadata (model version, latency, cost).
• Interaction signals: thumbs up/down, comments you leave on AI output, edits to drafts you copy, panel-open / panel-dwell timings.
• Optional surveys: occasional one-tap questions ("did this change your mind on the topic?") that you can disable at any time.

2. Why we collect it

• To deliver the analysis you requested.
• To improve the model and prompts (see Training Data, below).
• To enforce per-tier quotas and detect abuse.
• To contact you about your account or, if you've opted in, product updates.

3. Training data

Your debate inputs (tweet text), our outputs (analyses, drafts), and the signals above may be used to:

• Refine the prompts we send to language models (today).
• Fine-tune our own future models (later).

You can opt out at any time from the Settings panel inside the extension. Opting out applies prospectively — analyses already collected with your prior consent remain in our training corpus, but you can request deletion via the DELETE /me endpoint or by emailing us.

4. Sign-up perks and Founding readers

When you first complete magic-link sign-in, Receipts stamps a one-time 30-day full Pro trial on your account (tracked via early_supporter_until) so you can try every feature. After that window you return to the Free tier (5 briefs/day) unless you subscribe when paid Pro is available.

The first 100 accounts to claim a badge slot become Founding readers (numbered badge in the product). This is a thank-you, not lifetime free Pro: when paid Pro is available, Founding readers will be eligible for 50% off Pro for their first six months if they subscribe within six months of their trial start. Eligibility and discount mechanics may be adjusted as billing goes live; we will email anyone affected before material changes.

New sign-ups have training-data and analytics consent defaulted to ON so we can learn from real usage; flip them off any time in Settings without losing your badge number.

5. Third parties

• Anthropic processes your tweet content to generate analyses. We use Anthropic's API with prompt caching enabled. Anthropic privacy policy.
• Tavily processes specific factual claims for web verification. Tavily privacy policy.
• Resend sends transactional sign-in emails. Resend privacy policy.
• Stripe (when payments launch) handles billing.
• Hosting on Render or equivalent EU/US infrastructure.

6. Your rights

• Access: GET /me/data returns a JSON dump of everything we have on you.
• Deletion: DELETE /me soft-deletes your account and detaches your email from analytics rows. Email hello@loalab.art for hard deletion.
• Portability: the JSON export is machine-readable.
• Objection / withdrawal of consent: Settings → consent toggles.
• Complaints: contact your local data protection authority (e.g. ICO in the UK, CNIL in France).

7. Retention

Account rows are kept while the account is active and for 12 months after deletion to handle billing reconciliation. Training-corpus rows keyed only by hashed user ID are kept indefinitely unless deletion is requested.

8. Children

Receipts is not directed at children under 16 and we do not knowingly collect their data.

9. Changes

Material changes will be notified via the email address on file.

10. Contact

hello@loalab.art