This policy describes what AIRA collects, why, and who else sees it. AIRA is operated by Benjamin Tian.
Account information. Your email address and password. Your password is handled by our authentication provider (Supabase) and stored only in hashed form — we never see or store it in plain text.
Content you provide. Your name, the goals you describe, and the standup text you submit. This content is sent to our AI provider (Anthropic) so it can be graded and structured into stories.
Payment information. If you connect a card, your card details are collected and stored directly by Stripe, our payment processor. We never receive or store your raw card number — only a reference token identifying your Stripe customer and payment method.
Usage and performance data. Aggregated, privacy-friendly analytics (page views, load performance) via Vercel Web Analytics and Speed Insights. This is cookieless and doesn’t identify you individually.
Error diagnostics. When something breaks, technical details (like the error message, stack trace, and the page you were on) are sent to our error-monitoring provider (Sentry) so we can fix it.
Technical logs. Our hosting provider (Vercel) automatically logs standard request data (like IP address and browser type) for security and operational purposes, as essentially all web hosts do.
To operate the service: grading your standups, tracking your goals and risk score, processing payments when a deposit is charged, sending you the notification emails described below, diagnosing bugs, and keeping the service secure and running.
We don’t sell your personal information, and we don’t use it for advertising.
We rely on the following third-party services to run AIRA. Each only receives the data it needs to do its job:
Each of these providers has its own privacy policy governing how it handles data on our behalf.
We send transactional emails tied directly to your account activity: when a standup is graded, when your status escalates toward or reaches termination, and a daily reminder if you haven’t filed a standup. We don’t send marketing email. There is currently no opt-out toggle for these notifications — they’re core to how the service works. If you don’t want them, don’t use the service, or contact us and we’ll close your account.
We use a session cookie to keep you signed in. That’s it — no advertising or cross-site tracking cookies. Our analytics provider (Vercel Web Analytics) doesn’t use cookies at all.
We keep your account data for as long as your account is active. There’s currently no self-service “delete my account” button — to request deletion of your account and associated data, email us at manager@aira1.org, and we’ll process it.
You can ask us to access, correct, or delete your personal information at any time by emailing manager@aira1.org. If you’re a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA); contact us and we’ll honor applicable requests.
We use reasonable technical measures (encryption in transit, hashed passwords, row-level database access controls) to protect your data, but no method of transmission or storage is 100% secure, and we can’t guarantee absolute security.
AIRA is not intended for anyone under 18, and we don’t knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we’ll remove it.
AIRA is operated from, and your data is processed and stored in, the United States. By using the service, you consent to your information being transferred to and processed in the United States.
We may update this policy from time to time. We’ll update the “Last updated” date above when we do.
Questions about this policy, or a request regarding your data: manager@aira1.org.