Privacy Policy

1. Scope

This Privacy Policy explains how idelot collects, uses, shares, and protects personal information when you use our website, MCP server, hosted validation experiences, and related services (collectively, the “Service”).

2. Information we collect

We may collect the following categories of information:

• Account information: GitHub identifier, username, display name, email address, avatar, and authentication details provided through GitHub OAuth.
• Project content: ideas, prompts, project details, published HTML and other material you ask idelot to store or publish.
• Participant information: email addresses and other information people submit through your published experiences.
• Usage and analytics: page visits, conversion events, timestamps, and related technical information used to report experiment performance.
• Technical information: request, device, browser, network, security, and diagnostic information generated when the Service is used.

3. How we use information

We use information to provide and secure the Service, authenticate users, create and host experiments, collect participant responses, calculate analytics, provide support, diagnose problems, prevent abuse, and improve functionality. We may also use information to comply with legal obligations and enforce our terms.

Authorized operators and service providers may access and manually review account data, project content, published experiences, participant information, analytics, and technical records for these purposes. For example, access may occur while investigating a failure, responding to support, reviewing suspected abuse, testing functionality, improving service quality, protecting security, or complying with a legal request. Access is not limited to automated processing.

4. How information is shared

We may share information with infrastructure, authentication, security, analytics, and other service providers that process it on our behalf. This includes providers such as GitHub and Cloudflare. Information may also pass through the AI client you choose to connect, subject to that provider’s own terms and privacy policy.

We may disclose information when required by law, to protect rights and safety, or as part of a merger, financing, acquisition, or transfer of the Service. We do not sell personal information.

5. Public content

Experiments you publish are available at a public URL. Do not include confidential, sensitive, or personal information in published content unless you intend to make it public and have the right to do so.

6. Your responsibilities for participant data

When you use idelot to collect information from participants, you determine the purpose of that collection and are responsible for providing any notices and obtaining any consent required by law. idelot processes participant information to operate the experiment and make the results available to you.

7. Data retention

We retain information for as long as we consider reasonably necessary to provide, secure, maintain, analyze, or improve the Service; enforce our terms; resolve disputes; and meet legal obligations. Retention periods depend on the type of information, operational needs, account activity, storage limits, and why the information was collected.

Subject to applicable law, we may delete, overwrite, aggregate, anonymize, or make unavailable information at any time, with or without prior notice, including because of inactivity, account suspension, storage management, security, discontinued functionality, or shutdown of the Service. We do not promise to retain information for any minimum period or to recover information after deletion. Residual copies may remain in backups or records until they are overwritten or no longer needed.

8. Security

We use reasonable administrative, technical, and organizational measures designed to protect information. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

9. Your choices and rights

You may disconnect idelot from your AI client, stop using the Service, or request access to, correction of, or deletion of your personal information. Your rights may vary by location, and some information may be retained where required for security, legal, or legitimate business purposes.

10. International processing

Information may be processed in countries other than where you live. Where required, we use appropriate safeguards for international transfers.

11. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

12. Changes to this policy

We may update this policy as the Service and our practices change. We will post the revised policy with a new effective date.

13. Contact

Privacy questions and requests may be submitted through the support channel made available within the Service.