Privacy Policy

Account information. We collect your email address and authentication information when you create or access an account. If you sign in with Google, we receive information made available by Google and authorized by you, such as your email address, account identifier, name, and profile image. We do not receive your Google password.

User content. We collect the questions, prompts, discussion topics, follow-up messages, model selections, feedback, and other content you submit. If you upload a document or image, we process the file and may store extracted text, file metadata, and content needed to provide the requested analysis.

AI responses and session records. We store model responses, analyses, challenges, votes, final reviews, workflow status, and discussion history so that you can view and continue sessions.

Usage and technical information. We collect model and provider identifiers, request times, token usage, search/tool usage, latency, error information, estimated provider cost, Compute Credits reserved or charged, and related diagnostic records. Our hosting and security providers may also process IP address, browser, device, cookie, and server-log information.

Payment and billing information. We collect payment status, Stripe customer and transaction identifiers, purchased Compute Credits, balances, ledger activity, refunds, and dispute information. Stripe processes payment-card details directly; Roundtable AI does not store complete card numbers or card security codes.

We use information to provide and operate multi-model discussions, Evidence Chain analysis, Decision Committee workflows, web-enabled research, file analysis, session history, final reviews, and other requested features; authenticate users and maintain accounts; calculate usage, reserve and charge Compute Credits, process purchases, and maintain financial records; personalize language and product settings; diagnose errors, prevent fraud and abuse, enforce limits, and secure the Service; analyze product performance and improve reliability; communicate about accounts, transactions, security, support, and material policy changes; and comply with law and enforce our agreements.

Roundtable AI output is generated by automated systems. It can be inaccurate or incomplete and is not a substitute for qualified legal, medical, financial, or other professional advice. We do not use AI output to make legally binding decisions about you.

To provide a discussion, we send the relevant prompt, context, attachments or extracted content, and prior conversation material to the AI provider selected by you or selected by the workflow. Depending on your configuration, recipients may include OpenAI, Google (Gemini), xAI (Grok), Alibaba Cloud (Qwen), DeepSeek, Zhipu AI (GLM), Xiaomi (MiMo), or Moonshot AI (Kimi). Web-search queries and retrieved sources may also be processed by the selected provider and its search partners.

We use service providers including Supabase for authentication and database infrastructure, Vercel for hosting and delivery, Stripe for payment processing, and Google when you choose Google authentication. These providers process information on our behalf or as separately described in their own terms and privacy notices.

Each AI provider has its own data-processing practices and contractual terms. Do not submit confidential, regulated, or highly sensitive personal information unless you are authorized to do so and accept the applicable provider’s processing terms.

We may also disclose information when reasonably necessary to comply with law, legal process, or valid government requests; protect users, the public, or the Service; investigate fraud or security incidents; enforce agreements; or complete a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising.

When you use Google Sign-In, Roundtable AI uses Google account data only to authenticate you, create or link your account, display basic profile information, and communicate with you about the Service. We do not use Google account data for advertising, and we do not request access to Google Drive, Gmail, contacts, calendar, or other Google services unless a future feature clearly requests additional permission.

Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements, where applicable.

We use essential cookies and browser storage to maintain authentication sessions, protect account access, remember language and interface preferences, and support core application functionality. Supabase authentication uses secure session cookies. We may introduce optional analytics only after providing any notice or consent required by applicable law.

Account and session information is generally retained while your account remains active or as needed to provide the Service. You can delete individual discussion sessions from History. Deleting a session removes its associated participants, rounds, messages, and analyses from the active application database, subject to backups and records that must be retained separately.

Usage, security, payment, Compute Credit ledger, tax, fraud-prevention, and transaction records may be retained after session or account deletion where needed for accounting, dispute handling, legal compliance, security, and enforcement. Backup copies may remain for a limited period until overwritten according to our providers’ backup cycles.

When information is no longer reasonably required, we will delete or de-identify it, subject to legal and operational retention requirements.

You may access session history and billing activity through the Service, delete individual discussions, stop using Google Sign-In, and sign out at any time. You may request access to, correction of, export of, or deletion of personal information by contacting us. We may need to verify your identity and may retain information where permitted or required by law.

You can revoke Roundtable AI’s Google account access from your Google Account security settings. Revoking Google access does not automatically delete your Roundtable AI account or records; contact us if you also want account deletion.

Depending on where you live, you may have additional privacy rights, including the right to object to or restrict certain processing or to complain to a data-protection authority. We will not discriminate against you for exercising applicable privacy rights.

Roundtable AI is designed for international use. We and our providers may process information in Hong Kong, the United States, the European Economic Area, mainland China, Singapore, and other jurisdictions where selected AI and infrastructure providers operate. These jurisdictions may have different privacy laws. Where required, we rely on contractual or other recognized safeguards for international transfers.

We use reasonable administrative, technical, and organizational safeguards, including authenticated access, row-level database controls, server-side credential handling, Stripe-hosted payment collection, signed webhooks, and access restrictions. No internet transmission or storage system is completely secure, and we cannot guarantee absolute security.

The Service is not directed to children under 13, or under the minimum age required to consent to online services in their jurisdiction. We do not knowingly collect personal information from such children. If you believe a child has provided personal information, contact us so that we can review and delete it where appropriate.

We may update this Privacy Policy as the Service, providers, or legal requirements change. We will post the revised policy here and update the “Last updated” date. If changes are material, we may provide additional notice through the Service or by email.

For privacy questions or requests, contact help@roundtable-ai.net. Please do not include passwords, full payment-card details, or highly sensitive information in your request.