1. What We Collect

When you take an audit, we may collect your name, email address, newsletter preference, audit type, generated report content, delivery metadata, limited usage/session data needed to operate the product, and internal administrative records such as send status, timestamps, and credit use.

We do not intentionally store highly sensitive personal information, financial account details, government identifiers, or the exact answer-level audit response set as part of the long-term lead record used for operations.

2. How We Use It

We use this information to:

• run the audit analysis flow through AI tooling,
• generate and email your report,
• maintain delivery records and prevent abuse,
• review duplicate submissions and support administrative operations,
• send optional newsletter or inner-circle material only if you opted in.

3. Services and Infrastructure

Caelvyn relies on a limited set of third-party providers to operate the service:

• Supabase for data storage, admin authentication, and database access control.
• Puter for AI analysis and session-related usage handling.
• Resend for report email delivery.
• Cloudflare or equivalent network infrastructure for site security, caching, and traffic delivery when configured at the hosting layer.

These providers may process technical data required to deliver their part of the service.

4. What We Store

The lead and report system is intentionally narrow. The core retained record is limited to your name, email, audit identity, generated report payload, newsletter preference, and related administrative tracking needed to operate the audit service.

We do not present your raw answer set as part of the normal long-term lead record, and we do not store extra confidential data unless you voluntarily submit it through the product.

5. Security and Access

Access to stored lead data is restricted through database policies and admin authentication. Public users are not given general read access to lead records. Administrative access is limited to the operator account used to manage the dashboard and report operations.

No internet-facing system is absolute. We use reasonable technical and operational controls, but no platform can guarantee perfect security in every circumstance.

6. Retention

We retain audit lead and report records for operational, delivery, abuse-prevention, and business continuity purposes unless a shorter retention requirement applies or deletion is requested and can be honored.

7. Your Choices

If you want your record reviewed, corrected, or deleted, contact the operator through the channel made available by the site or brand. Newsletter communications are optional and can be stopped by opting out when such controls are made available.

8. Changes

This policy may be refined as the service evolves. Material updates should be reflected on this page with an updated effective date.