Plain-English summary
AI Review stores the minimum needed to run the service. Your provider API keys are encrypted at rest. Your review content is sent to whichever LLM provider you've selected (default: DeepSeek), nothing else. We don't sell data, share with advertisers, or train models on your content. This is an open beta — expect rough edges and contact us for data requests.
What we collect
- Account: email and an argon2id hash of your password (never the password itself).
- Personas: the role, tone, sample text, and rules you provide when creating a persona.
- Provider keys: AES-256-GCM encrypted at rest (per-row IV, sealed with an operator-held master key) under field-level encryption.
- API keys: we mint keys for your external integrations. Only an argon2id hash is stored; the plaintext is shown to you once at creation time.
- Reviews: the content you submit, the model output, the persona used, token usage. We retain reviews so you can see history.
- Usage metadata: request count, token count, model used. Powers the daily free-trial cap (see Terms).
Where it goes
- MongoDB Atlas (hosted by MongoDB Inc., region: AWS US-East-1) — primary database.
- Vercel (hosted by Vercel Inc., regions: global edge + iad1) — hosts the app and serves requests.
- LLM provider of your choice — DeepSeek, Anthropic, or OpenAI. Your review content is sent only to the provider matched by your persona's preference (or the shared default).
- Upstash Redis — only stores rate-limit counters keyed by API key id. No content.
We don't share data with third parties beyond these processors. We don't run advertising, analytics that profile you, or any data brokers.
What we don't do
- We do not sell your data.
- We do not train any model on your content or persona text.
- We do not embed third-party tracking pixels or ad scripts.
- We do not log your plaintext password or plaintext provider keys.
Your rights
You can request data export or deletion at any time. In this open-beta phase the flow is manual — email privacy@aireview.local (placeholder; update before public launch) and we'll handle it within 30 days. Self-service export and deletion are planned for v1.1.
Cookies
We set one session cookie via NextAuth (JWT, HttpOnly, Secure, SameSite=Lax). No marketing or third-party cookies. The cookie is required to keep you signed in.
Email verification (deferred)
Email verification is not yet wired in this beta release. We accept any email at sign-up. Don't sign up with an email you don't own — if you forget your password, we have no way to verify ownership today. Verification + password reset land in v1.1.
Changes
We'll update this page in place and bump the "Last updated" date. For material changes affecting signed-up users, we'll email you (once email delivery is wired) or post a notice in the dashboard.