Privacy Policy

• Account data — your email address and authentication details. If you sign in with Google or Apple, we receive the email those providers share.
• Your content — the projects, documents, claims, private evidence, and reports you create in the workspace.
• Billing data— your subscription status and usage counts (how many claims you’ve verified). Payment card details go directly to our payment processors and never touch our servers.
• Operational logs — standard server logs (IP address, request metadata) kept for security and debugging.

We use your data to run the product: storing your workspace, extracting and verifying claims you queue, metering usage against your plan, and emailing you transactional messages (confirmation, password reset). We do not sell your data, and we do not use your documents to train AI models.

Eustace is built on a small set of processors, each receiving only what its job requires:

• Supabase — database and authentication (stores your account and workspace content).
• Vercel — application hosting and AI Gateway routing.
• AI model providers (via Vercel AI Gateway, currently Anthropic) — receive document text and claims to perform extraction and verification.
• Tavily — web search; receives search queries derived from claims being verified (not your whole document).
• RevenueCat and its payment partners — subscription billing.

Your content stays in your workspace until you delete it. Deleting a project, document, or claim removes it from the live database. Encrypted backups age out on a rolling schedule. To delete your entire account and its data, contact support@eustace.app and we’ll complete the deletion within 30 days.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Email us and we’ll honor these requests. Reports you export are yours — Markdown files you can keep anywhere.

Data is encrypted in transit (TLS) and at rest by our infrastructure providers. Access to production data is restricted, and rows in the database are isolated per account.

We use only the cookies required to keep you signed in (authentication session). No advertising or cross-site tracking cookies.

If this policy changes materially, we’ll notify you before the change takes effect. Questions or requests: support@eustace.app. See also the Terms of Service.