Privacy Policy

Overview

This Privacy Policy explains how Tuesday Riot LLC ("we," "us," or "our") collects, uses, and protects information when you use our website and products, including imYou ("the Service"). By using the Service, you agree to the practices described in this policy.

Our guiding principle is simple: we collect only what is strictly necessary to operate the Service. We do not sell your data, we do not profile you for advertising, and we store as little as possible on our servers.

1. Information We Collect

Account Information: When you register, we collect your email address. This is the primary personal information stored on our servers.

Account Status and Credits: We store your subscription tier, credit balance, credit reset date, and a flag indicating whether you have completed your first profile build. These fields exist solely to operate the Service and enforce plan limits.

Beta Access Status: We store a field indicating whether your account has been approved for beta access.

Payment Information: We do not currently process payments. When payment processing is introduced, it will be handled entirely by a third-party payment provider. We will not store your card details.

2. Your Personal Profile — Local Only

Your personal profile is the core of the Service. It is built from your onboarding conversation and any writing you share during your sessions. This profile is stored exclusively on your device using browser-native storage (IndexedDB). It is never transmitted to our servers, never stored in any database we control, and never sent to any third party.

When you use the writing features, your personal profile is included in API requests to Anthropic solely to generate your output. Those requests are stateless — we do not log them, cache them, or retain any record of their content.

You own your personal profile entirely. You can export it, edit it, back it up, or delete it at any time from within the Service.

3. Browser Extension

The imYou browser extension lets you generate in your voice on any web page. To do this, a small script runs on web pages to detect when you highlight text and to show the imYou prompt near your selection. It reads page content only when you actively select text and activate the extension (by clicking the imYou prompt, the right-click menu, or the toolbar icon) — it does not read, monitor, collect, or transmit the pages you browse, only the specific text you select and submit. Selected text is used solely to generate your output and is handled the same way as any other writing input: included only in a stateless generation request (see Section 2) and never logged, cached, or stored by us.

The extension authenticates using your own account access token, which you provide by connecting it from within imYou. The token, along with a copy of your personal profile, is stored locally in the browser's extension storage on your device. As described in Section 2, your profile is transmitted only as part of a stateless generation request and is never stored or retained on our servers. Your chat history in the extension is stored locally on your device and is separate from your history on the website.

The extension requests browser permissions (side panel, local storage, context menu, and access to the active tab when you activate it) only to provide these features. It does not use them to track your browsing or to collect data in the background.

4. What We Do Not Collect

We do not collect usage analytics, page view data, session recordings, or behavioral data of any kind. We do not use tracking pixels, fingerprinting, or any third-party analytics tools.

We do not collect your writing samples, your chat history, your generated content, or any output produced by the Service. This data exists only on your device.

We do not collect device identifiers, IP addresses for tracking purposes, or any information beyond what is listed in Section 1.

5. How We Use Your Information

We use your email address to maintain your account, send account-related communications (such as approval notifications and support responses), and verify your identity when you log in.

We use your beta access status to control access to the Service during the beta period.

We do not use your information for advertising, profiling, or any purpose beyond operating your account.

6. How We Share Your Information

Supabase: We use Supabase to handle authentication and store account data (email, beta access status, subscription tier, credit balance, credit reset date, and a flag indicating whether your first profile build has been completed). Supabase processes this data on our behalf and is subject to their privacy policy (supabase.com/privacy). Account data is stored in Supabase infrastructure.

Anthropic: Writing requests are processed via the Anthropic API. The content of each request is subject to Anthropic's privacy policy (anthropic.com/privacy) and API usage policies. We do not send your personal profile to Anthropic as stored data — it is included only as part of a stateless request context and is not retained by us.

Vercel: All web requests are routed through Vercel's infrastructure before reaching our application. Vercel processes request metadata (IP address, headers) in accordance with their privacy policy (vercel.com/legal/privacy-policy).

Legal Requirements: We may disclose information if required by law or in response to a valid legal request.

Business Transfer: In the event of a merger or acquisition, your account information may be transferred as part of that transaction. We will notify you before this occurs.

We do not sell, rent, or share your personal information with any other third parties.

7. Data Storage and Security

Account data (email, beta status) is stored by Supabase with industry-standard security controls including row-level security policies.

Your personal profile, chat history, and all writing data lives in your browser's local storage (IndexedDB) and never leaves your device through our systems.

No method of storage is 100% secure. We take reasonable measures to protect the information we do hold, and we minimize what we hold to reduce risk.

8. Data Retention

We retain your account data (email and beta status) for as long as your account is active. If you request deletion, we will remove your account from our systems within 30 days.

Your local data (personal profile, chat history) is retained on your device until you delete it or clear your browser storage. We have no ability to delete it remotely.

9. Your Rights

You have the right to access the personal information we hold about you (email, beta status), request correction of inaccurate information, request deletion of your account and all associated server-side data, export your personal profile at any time from within the Service, and request a portable copy of your data.

To exercise any of these rights, contact us at support@tuesdayriot.com.

10. EU/EEA Users (GDPR)

If you are located in the European Economic Area, we process your personal data under the following lawful bases: email address and account credentials are processed on the basis of contract performance (Article 6(1)(b)) — they are necessary to provide the Service you signed up for. Beta access status is processed on the basis of legitimate interests (Article 6(1)(f)) — specifically, to control access during our beta period and protect the integrity of the Service.

You have the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing and to lodge a complaint with your local data protection authority.

Tuesday Riot LLC qualifies for the Article 27 SME exception and has not designated a formal EU representative at this stage of operations.

11. California Residents (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To submit a request, contact us at support@tuesdayriot.com. We will respond to verifiable CCPA requests within 45 days.

12. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. Users must affirm they are 13 or older at registration. If you believe a child has provided us with personal information, contact us and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy when our practices change — for example, when payment processing or analytics are introduced. We will notify you of material changes by email at least 30 days before they take effect. Continued use of the Service after changes take effect constitutes your acceptance. If you do not agree to material changes, you may cancel your account before they take effect.

14. Contact

Tuesday Riot LLC

Email: support@tuesdayriot.com

Website: tuesdayriot.com