Privacy Policy

Draft for legal review. Last updated 2026-10-17.

What we collect

• Account data: email, name, password hash, sign-in events.
• Conversation content: your questions and the answers produced, kept until you delete them.
• Files you attach: pictures (rebuilt from their pixels when you attach them, which removes location and camera details), PDFs and text files, kept with the question until you delete it or your account. Attached files that never go with a question are deleted after a day. Pictures Tizit makes for you are kept the same way.
• Model requests and responses: what each AI model returned, kept for 90 days for quality analysis, then deleted.
• Usage data: questions asked, levels used, timings, token counts and cost.
• Billing data: handled by Stripe; we store your Stripe customer id and subscription status, never card numbers.

How we use it

To answer your questions, enforce plan limits, prevent abuse, improve answer quality, and bill subscriptions. We do not sell personal data.

Third parties

Questions, and the files you attach to them, are sent to AI model providers (for example Anthropic, OpenAI, Google, xAI, and models reached through OpenRouter) and, for web evidence, to a search provider. Each processes data under its own policy. Long-tail models are routed to providers that do not retain data where the routing service offers that option.

Analytics

On tizit.com we use Google Analytics to count visits and see which pages are used. It sets cookies on your device. We send it the page you are on with any identifiers removed and a fixed page name; we never send your questions, the answers, chat names or anything you type. Google signals and ad personalisation are turned off.

Retention and deletion

You can delete conversations from your history and delete your account from the account page. Server logs are kept 30 days. Records required for tax and accounting are kept as the law requires.

Security

Secrets stay on the server. Sessions use secure, HTTP-only cookies. Access to the admin area is limited to named administrators and audited.

Contact

Questions about privacy: use the contact address on the Tizit website.