Privacy Policy
Last updated: September 7, 2026
1. Who we are and what this covers
This Privacy Policy describes how tellodb ("we", "us", "our"), the operator of RigorDesk ("the Service"), collects, uses, stores and protects your personal information. For the purposes of the UK and EU General Data Protection Regulation, we are the data controller for the information described here. You can reach us at sharjeel@tellodb.com for any question about this policy or to exercise the rights set out in section 11.
2. Information we collect
You give us directly: account information (email address, username) when you register through Supabase Auth; profile information (avatar, bio, social links) if you choose to set up a public profile; and content you create, which includes prompts, uploaded documents, panel configurations, review outputs and comments. We generate or observe: usage data (tokens consumed, reviews run, features used), billing history (plan tier and payment dates, handled by Paddle, we never see or store your full card number), and technical data (IP address, browser and device information) in standard server logs. If, and only if, you opt in to analytics cookies, we also receive page views, scroll depth, clicks and, on marketing pages only, screen replay. Analytics collects nothing at all until you opt in.
3. Our legal bases for using it
If you are in the UK or the EEA, we must have a legal basis for each use. We rely on: performance of a contract, to give you an account, run the reviews you ask for and take payment; legitimate interests, to keep the Service secure, prevent abuse, debug faults and understand aggregate demand, balanced against your rights; consent, for analytics cookies, screen replay and Google One Tap, which you may withdraw at any time without affecting anything you did before you withdrew; and legal obligation, for tax, accounting and responding to lawful requests. Where we rely on legitimate interests you have the right to object, and we will stop unless we can show compelling grounds that override your interests.
4. How we use your information
To provide and maintain the Service, including authentication, running reviews and processing payments; to enforce plan limits and token caps; to communicate with you about your account, billing and material product changes; to investigate abuse, fraud and security incidents; to improve the Service using aggregate usage data; and to display content you have deliberately chosen to make public. We do not use your prompts, documents or review transcripts to train our own models, and we do not sell your personal information.
5. Public content and profiles
When you publish a panel template to the community library, publish a review, or set your profile to public, some information becomes visible to anyone: your username, avatar and bio; the template name, description, model configuration and star count; the published review content; and any comments you post. Published reviews may be indexed by search engines and can be embedded on other sites, so treat publishing as making the content permanently public. You control profile visibility and publication from your Settings page, and you can unpublish, though we cannot recall copies others have already saved or that search engines have cached.
6. AI model processing and automated outputs
Running a review sends your prompt, the relevant context and any attached documents to the model providers you select, through our model gateway. Those providers process the content under their own terms, and their logging, abuse monitoring and retention differ by provider and by model route. Do not submit information you are not permitted to disclose to a third-party processor. Review outputs are generated by language models and are not a professional opinion, a legal or financial recommendation, or a statement of verified fact. RigorDesk does not make automated decisions that produce legal or similarly significant effects about you within the meaning of GDPR Art. 22; the decision about what to do with a review is always yours.
7. Third-party services we rely on
Supabase provides authentication, database and file storage. Paddle processes subscriptions and billing. Resend delivers transactional and preference-based email. Vercel hosts the application and provides aggregate, cookieless analytics. Model providers reachable through our gateway process the content you submit for review. Google Fonts serves two icon and code typefaces on signed-in application pages, which means Google receives your IP address for those requests. Our model picker fetches provider logos from Google's favicon service, which likewise discloses your IP address to Google. If you opt in to analytics, we additionally use Google Analytics 4, PostHog and Google One Tap, as itemised in our Cookie Policy. We do not sell your personal information to any of them.
8. Cookies, local storage and analytics
We store a small number of strictly necessary items on your device: your Supabase sign-in session, your theme choice, your cookie decision, and any pending referral code. These are required for the Service to work and are exempt from consent. Everything else is opt-in. Google Analytics 4 and PostHog do not load, set anything, or contact their servers unless you have actively accepted analytics cookies on the banner, and rejecting is as easy as accepting. PostHog screen replay is limited to marketing pages, is never enabled inside the workspace, settings, sign-in or invite pages, and never captures text you type into a field. We honour Global Privacy Control signals as a refusal. We do not use advertising cookies, retargeting pixels or social tracking pixels. The Cookie Policy lists every item by name, purpose and duration, and you can change your choice at any time from the footer of any page.
9. Data storage and retention
Account data, panel templates, workspace messages, uploaded documents, review transcripts and profile information are retained while your account is active, unless you delete them sooner. Server logs are retained for 30 days and do not contain prompt, response or document contents. Deleting a review removes its application record, transcript, comments, public link and uploaded document data. Deleting your account removes your authentication identity and application content once active subscriptions and in-flight reviews are resolved. Billing records are kept for as long as tax and accounting law requires, typically six to seven years, even after account deletion. None of this controls copies already processed by model providers, payment processors or other providers, which may retain limited records under their own policies or legal duties. Because provider retention differs by route and changes over time, we do not promise a single provider-side retention window.
10. Security
Traffic between your browser and the Service is encrypted with TLS. Authentication tokens are managed by Supabase Auth. Database access is constrained by row-level security policies. Administrative access is limited to the people who need it. No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security. If a breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, and notify you where the law requires.
11. Your rights
Wherever you are, you can access and update your information from Settings, request a machine-readable export, delete your account, and opt out of non-essential email. If you are in the UK or EEA, you also have the right to rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, and withdrawal of consent at any time. Exercising these rights is free and we will respond within one month. You may also complain to your local supervisory authority: in the UK the Information Commissioner's Office, and in the EEA the authority in your country of residence. If you are a California resident, you have the rights to know, delete, correct and limit under the CCPA as amended by the CPRA, and the right not to be discriminated against for exercising them; we do not sell or share personal information for cross-context behavioural advertising. Residents of other US states with comprehensive privacy laws have comparable rights. To exercise any of these, email sharjeel@tellodb.com from your account address.
12. Children
The Service is not directed to children. You must be at least 16 to use the Service if you are in the European Economic Area or the United Kingdom, and at least 13 elsewhere, subject to any higher age set by your local law. We do not knowingly collect personal information from anyone below the applicable age. If we learn that we have, we will delete it promptly. If you believe a child has given us information, contact us at the address above.
13. International data transfers
We and our providers operate in the United States and elsewhere, so your information will be transferred outside your country of residence. For transfers of UK and EEA personal data to the United States we rely on the European Commission's Standard Contractual Clauses, with the UK Addendum where applicable, supported by the EU-US Data Privacy Framework where a given provider is certified under it. The Data Privacy Framework remains subject to legal challenge, so we do not rely on it alone. You can avoid the analytics-related transfers entirely by declining analytics cookies, which does not limit your use of the Service.
14. Changes to this policy
We may update this policy. Where a change is material, we will tell you by email or in the Service before it takes effect, and where the change affects what we do with cookies we will ask for your consent again rather than assume the old answer still applies. The date at the top of this page reflects the most recent update.
15. Contact
For any question about this policy, or to exercise a right described in section 11, email sharjeel@tellodb.com. We will respond to verified requests within one month, and will tell you if we need longer because a request is complex.