Privacy policy

Submitted data

Housecarl Arbiter functions as a formal reasoning engine that processes Claims, Evidence, and Actors you submit for mathematically grounded analysis.

A one-off analysis — a request that does not create an investigation session — is processed ephemerally. We do not hold the submitted data after the analysis is returned.

Data you place in an investigation session is stored, because the point of a session is that you can come back to it. That storage is described below.

Authentication data

All authentication data, including user identity and JSON Web Tokens (JWTs), is held and managed by a third-party authentication provider, such as Clerk.

Investigation sessions

When you create an investigation session, Housecarl Arbiter stores the investigation data you provide — including claims, evidence, actors, and analysis results — in our database so you can return to it, refine it, and re-analyze over time. Session data is associated with your account and retained until you delete it. We do not expire sessions on a timer; an investigation you leave alone for a year is still there when you come back. You can delete any session at any time through the console, the API, or the MCP tools.

We reserve the right to enforce reasonable per-account storage limits, and to remove data held in free accounts that have been inactive for an extended period. We will write to the account’s registered address before removing anything on that basis.

Published investigations

If you publish an investigation as a share page, its contents become readable by anyone holding the link — including any personal data about people or organizations you have named in it. Publishing is your decision and your act; see section 4 of our Terms of service. A published investigation stays published until its publisher unpublishes it or we take it down.

If you are named in a share page that you did not publish, write to corrections@housecarl.cloud. Our Corrections policy sets out what happens next. Taking a page down deletes the published snapshot, not merely its listing, and the session cannot afterwards be re-shared.

Saved investigations and API keys

If you save an investigation draft or create an API key, this data is stored on our servers and associated with your account. Saved drafts contain only the investigation input you composed — not analysis results. You can delete saved investigations and revoke API keys at any time from the console.

Operational data

We collect and retain limited operational data, such as access logs, which are necessary for diagnosis, performance monitoring, and service stability.

Deletion

When you delete an investigation session, saved investigation, or API key, the data is removed from our production database immediately.

Database backups

Our database is backed up daily for disaster recovery purposes. Deleted data may persist in backup snapshots for up to 30 days after deletion. Backups are stored in access-controlled cloud storage and are used solely for service restoration in the event of a system failure. Backup data is not accessed for any other purpose and is automatically purged as backup snapshots expire.

Data access

The Housecarl Arbiter team does not access the content of customer data submitted for analysis during normal operation.

Diagnostic and debugging access

Data submitted for analysis will only be visible to the Housecarl Arbiter team if a customer explicitly grants permission for diagnostic and debugging purposes related to a specific support request or service issue. In such cases, access is granted temporarily to resolve the issue.