Privacy

No personal data is collected. The app does not require sign-in, does not set tracking cookies, and does not store anything you type. All state lives in memory in your browser tab for the duration of your visit.

When you press Process request, the text you entered is sent over HTTPS to this app's server route, which forwards it to a configured language-model provider (Google Gemini, Groq, or Anthropic) under the operator's API key. The model provider's own data-handling terms apply at that hop.

The board, pipeline log, and follow-up timeline are all in-memory and reset on page reload. No emails, SMS, phone calls, or WhatsApp messages are actually sent — the “channels” in the timeline are visual indicators only.

API keys are server-side only and never reach the client bundle. The repository ships with an .env.example only; real keys must be set in .env.local or the deployment environment.

A simple per-IP rate limit (optional, only active when Upstash Redis is configured) protects the LLM keys from abuse. IPs are used only to enforce the limit and are not logged beyond that purpose.