Privacy Policy

1. Introduction

Sevenfires AI LLC (EIN: 42-2233722) operates Sagechat.ai ("Service"). We are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information.

2. Information We Collect

Account Information:

• Email address (used for login and account recovery)
• Name (optional, for personalization)
• Password (hashed, never stored in plaintext)
• Tribal affiliation (optional, for personalized cultural context)
• Account creation date

Usage Information:

• Chat messages and responses (stored for service improvement)
• Token usage (input/output counts for billing and fair use enforcement)
• Conversation history (for your reference and continuity)
• Timestamps of interactions

Technical Information:

• IP address (for security and abuse prevention)
• Browser type and version
• Device information
• Cookie identifiers
• Cloudflare analytics (aggregated, non-personal)

3. How We Use Your Information

We use your information to:

• Provide and maintain the Service (authentication, chat functionality)
• Personalize your experience (cultural preferences, tribal affiliation)
• Enforce fair usage policies (track daily token limits)
• Improve Sage's responses through feedback and conversation analysis
• Send service updates, security alerts, and account notifications
• Prevent fraud, abuse, and unauthorized access
• Comply with legal obligations
• Analyze usage patterns to improve the Service (aggregated, non-personal)

4. Data Storage & Security

Where Your Data Is Stored:

• Cloudflare D1 database (encrypted at rest, in multiple US regions)
• Cloudflare Pages (content delivery, cached in global network)
• Resend (email delivery service for password resets)

Security Measures:

• Passwords are hashed using industry-standard bcryptjs (never stored plaintext)
• Communication uses HTTPS/TLS encryption
• JWT authentication with secure session cookies
• Database encryption managed by Cloudflare
• Access controls and monitoring

While we implement robust security measures, no system is completely secure. We cannot guarantee absolute security.

5. Data Sharing & Third Parties

We do not sell or rent your personal information.

We may share information with:

• Anthropic: Chat messages are sent to Claude API to generate responses. See Anthropic's privacy policy.
• Cloudflare: Hosting, database, and analytics. See Cloudflare's privacy policy.
• Resend: Email delivery. See Resend's privacy policy.
• Legal requirements: We may disclose information if required by law, court order, or government request.

All third-party partners have agreed to maintain confidentiality and security of your data.

6. Your Rights & Choices

You have the right to:

• Access: Request a copy of your personal information
• Correction: Update inaccurate information
• Deletion: Request deletion of your account and associated data (with exceptions for legal compliance)
• Portability: Obtain your data in a portable format
• Opt-out: Decline optional communications (marketing emails)
• Withdraw consent: Stop data collection beyond what's necessary for the Service

To exercise these rights, contact us at the address below. We will respond within 30 days.

7. Data Retention

We retain your data for as long as your account is active or as necessary to provide the Service.

• Account information: Until you delete your account
• Chat history: Until you delete conversations or account
• Usage logs: 90 days for analytics, then aggregated
• Backup data: May be retained longer for recovery purposes
• Legal holds: Retained as required by law

After deletion, residual copies may remain in backups for up to 30 days.

8. Cookies & Tracking

We use cookies for:

• Authentication: JWT tokens in httpOnly cookies (secure, not accessible to scripts)
• Session management: Keeping you logged in
• Preferences: Storing your choices (sidebar state, etc.)
• Analytics: Cloudflare's aggregated usage data

Most browsers allow you to control cookies. Disabling them may prevent the Service from functioning properly.

9. Children's Privacy

Sagechat.ai is not intended for children under 13. We do not knowingly collect information from children. If we discover we've collected information from someone under 13, we will delete it immediately. Parents concerned about their child's use of the Service should contact us.

10. GDPR & CCPA Compliance

For EU residents (GDPR): We process your data based on your consent or legitimate interests. You have additional rights including the right to restrict processing and lodge complaints with your data protection authority.

For California residents (CCPA): You have the right to know, delete, and opt-out of data sales. We do not sell personal information.

11. Policy Changes

We may update this Privacy Policy at any time. Material changes will be announced via email or in-app notification. Continued use of the Service after updates constitutes acceptance of the new Privacy Policy.

12. Contact Us

For questions about this Privacy Policy or to exercise your rights:

Sevenfires AI LLC
Chad M. Parisien
Oak Creek, Wisconsin
EIN: 42-2233722

Response time: 30 days

Summary: We collect minimal information, handle it securely, and respect your privacy rights. We don't sell your data. Your conversations with Sage are sent to Anthropic's API to generate responses. For complete details, review this policy.