Privacy
Last updated 29 September 2026
What we keep
- Your email, when the account was created, your last sign-in, and your role.
- A password hash. Supabase stores it. We never see your password.
- Chat questions and answers. The app remembers the last 5 turns, and that memory is gone when you refresh or the server restarts. It is not saved on your account.
- Our logs keep the first 1,000 characters of each question and answer. They are not tied to your account. Render, which hosts the API, also keeps them in its logs.
- Our hosts see your IP address when you load the site and keep it in their logs for a short time.
- The login session stays in this browser tab. We do not use tracking or analytics cookies.
- Job listings come from public posts on thehub.io. They are not data about you.
Why
So an invited person can sign in, and so we can invite someone, revoke access, or restore it. A chat question is sent so we can write an answer. Logs help us fix bugs and spot abuse.
Where it lives
- Supabase, in Frankfurt, stores the account.
- Cloudflare keeps a nightly backup in a private bucket in the EU, and serves the websites.
- Cloudflare Turnstile checks the forms for bots.
- Render hosts the API in Frankfurt.
- Grafana Cloud stores the API logs in the EU.
- Google (Gemini) writes the chat answers. Google does not use those questions to improve its products. It keeps them for a limited time to check for misuse or when the law requires it, and it may store them outside the EU.
- Microsoft holds our mailbox.
How long
- The account stays until you ask us to delete it.
- A backup can still hold it for up to 30 days after that.
- A conversation in the app is gone on refresh or restart.
- Grafana Cloud keeps logs for 14 days.
- Render keeps logs for 7 days.
How to ask
Email hello@tookratt.com and ask for a copy or for deletion. We delete the account in Supabase. There is no delete button in the app. A backup can still hold it for up to 30 days.
If you use the waitlist or contact form
Your name, email and message are emailed to us and kept in our mailbox (hosted by Microsoft). Cloudflare checks the form for bots.