Updated September 17, 2026
This policy describes the data processed by the current version of Situationship and how to contact us about it.
1. Accounts and situations
We process your email, authentication information and account rights to provide access. Situations may contain aliases, context, events, notes, extracted conversation text, reports, conversations with Chips and reviewed drafts.
This information is linked to your account for saving and retrieval. Displayed private content uses temporary browser memory; session data and preferences may remain stored. Clearing browser storage does not erase your server-side account data.
2. Files and other people’s information
Files and screenshots are read in your browser to extract text. When you add them, originals are also saved in your account’s private storage. Authorized staff with two-factor authentication can retrieve them while available, before their 48-hour expiry, to administer the service and handle support.
Some identifiers, such as emails and numbers, may be masked automatically. This does not guarantee anonymity: names and identifying details may remain, especially in free text. Review your content and avoid unnecessary sensitive information. The site does not import your address book or location.
3. AI processing
Our server sends necessary information to an AI provider to prepare requests, estimate their cost and generate responses. Preparing a quote can therefore already transmit text before you confirm a generation.
Google Gemini currently provides this processing. Depending on the feature, information can include context, selected excerpts, a previous report, your question or your draft. Processing does not take place entirely on your device.
4. Purposes
Data is used to manage accounts, save situations, provide requested responses, manage credits and generation requests, handle support and protect the service against abuse.
Providing the requested service is based on performing our relationship with the user. Security and incident handling protect the service and accounts. Where applicable law requires consent, it must be collected separately; reading this policy is not blanket consent.
5. Usage and technical operation
Usage events, such as opening a flow or starting an analysis, may be recorded with your account identifier. They are not anonymous. This tracking is not intended to record conversation content, aliases or files.
Technical information about requests, errors, processed volumes, credits and costs may be retained for operations, security and incident handling. Your browser stores information needed for your session and language and appearance preferences.
6. Providers and international transfers
Situationship uses Supabase for accounts and saved situations, Google Gemini for AI, Resend for email and ChatGPT Sites / OpenAI for website hosting. They receive the data needed for their functions. Processing is not limited to your device.
The main Supabase database is configured in Paris, France. This does not guarantee that all server functions, logs, support access or subprocessors remain in France.
Google provides for processing in countries where it or its subprocessors have facilities. Preparing a quote may already send context, excerpts, your question or your draft to Gemini. We do not guarantee processing exclusively in France or Europe.
Resend states that data is stored in the United States, even when a European sending region is selected. Support emails may contain your reply address and message. ChatGPT Sites also uses international infrastructure and subprocessors; the full location of this deployment’s logs is not confirmed.
Providers publish data processing agreements and contractual safeguards for certain international transfers. These alone do not establish that Situationship has completed its own required formalities.
7. Keeping your situations
Situations, context, events, Reality Checks, Chips conversations and saved drafts are kept until the relevant situation or your account is deleted. There is currently no automatic deletion solely for inactivity. Archiving a situation, closing a tab or signing out does not delete server data.
Deleting an Ask conversation removes its saved messages and answers while preserving the situation’s reports and reviewed drafts. Minimal generation accounting records remain necessary to track credits and prevent duplicate charges. An ongoing operation may need to finish before deletion.
Original files and their transcripts are encrypted and become inaccessible 48 hours after their first import. An automated task removes them from active storage; scheduling or an outage can delay physical erasure. Reports, their excerpts, notes and Ask answers remain available until deleted. Analysing expired conversations again requires a new import. Removing a source does not automatically remove excerpts already used in a report. Original files, exports and downloads on your device remain under your control.
Displayed private content uses temporary browser memory rather than persistent application storage. Session data, preferences and certain recovery identifiers may remain stored. Clearing browser storage does not delete your server account data.
8. Support and technical data
Support requests and messages remain available for follow-up. Deleting all account data also erases them from the application. Copies in an email inbox or held by the email provider are separate from the active application data.
Usage events and information needed to track generations, credits and costs are kept for account operation and administration. The cockpit does not erase them automatically. Providers’ infrastructure logs follow their separate rules.
Readable AI results, credit balances and minimal records needed to track them are functional account data rather than ordinary technical logs. Live payments are currently disabled. Billing and retention rules must be specified before they are enabled.
9. Erasure, backups and provider retention
Requesting deletion of all data or of the account immediately removes access. An automated process then erases data and files from active systems, retrying after failures. Operations already in progress can delay this step. Authorized staff can resume processing after an incident. If an obligation requires some records to be retained, we explain which records, why and for how long. We do not keep a hidden administrative copy of erased conversations.
Recovery backups are separate from the active database. The project’s Supabase Pro plan provides a 7-day daily backup restoration window. This is not a guarantee that every internal provider copy is physically erased at the same instant. Accepted erasures must be reapplied after restoration before service resumes.
Google states that prompts, context and responses logged for abuse detection are retained for 55 days and may be accessed by authorized personnel. The Gemini project’s billing regime and settings also determine reuse conditions; without confirmation of those settings, we do not guarantee that Google never reuses data.
Resend publishes standard retention of 30 days for emails and logs on its Free, Pro and Scale plans, and 7 days for backups. Enterprise plans may have different terms. The exact sending account plan remains unconfirmed, so these published periods are not a guarantee that every copy of your emails is deleted. They do not cover copies received in a mailbox.
The exact retention of ChatGPT Sites logs and all internal provider copies is not confirmed. Erasure from Situationship’s active systems does not automatically cover provider backups or copies you have downloaded.
10. Requests and rights
You can request access, correction, erasure, a copy, restriction or objection to processing as provided by applicable law. Situation data can be exported from “My data”.
Email support@situationship.today or use “Contact us”, stating your account email and request. Proportionate identity verification may be necessary; never send your password. You can also contact the competent data protection authority under applicable law.
11. Information about someone else
If you believe information about you has been used without justification, contact us with the details needed to assess your request. Share no more private information than necessary.