Privacy Policy

1. Scope

This Privacy Policy applies to 121 Collaborative Foundation Beta, including public pages, account creation, Inkwell billing and usage features, Eleanor experiences when available, Quill downloads, and related services.

2. Data We Collect

We collect data you provide directly and data needed to operate requested services, including:

• Account data such as email address, display name, age-gate date of birth, and account identifiers.
• Authentication data handled through Supabase Auth, including session and security records.
• Subscription, tier, allowance, top-up, cancellation, and billing-status records.
• Inkwell usage events such as provider route, timestamp, cost, units, cap status, and billing metadata.
• Prompts, context, files, messages, or other content you submit to AI features.
• Support messages and deletion requests you send to us.

3. Supabase Storage

Supabase is used for user accounts, authentication, subscription account rows, allowance ledgers, rollover balances, usage events, user cap settings, and related application records. Supabase may process this data as a service provider so 121 can operate account-private features.

4. Stripe Payment Data

Stripe processes payment method details, cards, invoices, subscriptions, refunds, disputes, and related payment records under Stripe's terms and privacy policy. 121 does not store full card numbers or card security codes on its own systems.

121 may store Stripe customer IDs, subscription IDs, payment intent IDs, tier metadata, invoice status, and refund status so billing features can work.

5. Inkwell Usage Tracking

Inkwell records per-call usage and allowance events for billing, fraud prevention, support, cap enforcement, rollover calculations, top-ups, and operational debugging. Inkwell is a billing and accounting ledger, not a behavioral advertising profile.

We do not use Inkwell records to sell behavioral profiles or target third-party ads. Aggregated commons data may be shown without exposing another user's private usage history.

6. AI Providers and AI-Generated Outputs

Eleanor and other AI surfaces may send prompts, context, and conversation data to configured model providers or routing services so an output can be generated. The provider used for a turn may vary by configuration, availability, cost, and user settings.

Outputs from Eleanor or other AI features are AI-generated. They are not authored, verified, or guaranteed by 121. Do not submit content you are not allowed to share with a model provider.

7. Cookies, Local Storage, and Consent

We use essential cookies or local storage for sign-in, security, preferences, billing flow continuity, and similar service functions. Optional analytics are controlled by a consent banner. If you choose essential only, optional analytics components are not loaded by the site shell.

Users in regions with cookie or consent requirements, including the EU, UK, and Canada, should use the banner controls before enabling optional analytics.

8. Sharing and Service Providers

We do not sell personal data. We do not share personal data for third-party behavioral advertising. We only disclose data to service providers needed to deliver features you use, to payment and infrastructure processors, to model providers for requested AI outputs, when you explicitly opt in, or when required to comply with law or protect rights and safety.

9. Retention and Deletion

You may request account deletion by contacting hello@121collaborative.ai. When a deletion request is processed, 121 will delete or anonymize account data in Supabase where reasonably available and request deletion or cancellation of related Stripe customer and subscription records where Stripe permits.

Some records may be retained if needed for taxes, payment disputes, fraud prevention, security, backups, legal compliance, or legitimate business records. Deleted accounts may lose access to subscriptions, allowances, history, and support context.

10. Security

We use reasonable technical and organizational measures for Foundation Beta, including hosted infrastructure, access controls, and encrypted transport where supported. No system is perfectly secure, and you are responsible for protecting your credentials and avoiding unnecessary sensitive submissions.

11. Your Choices

You can cancel subscriptions, choose whether to enable optional analytics, request deletion, decline to submit sensitive prompts, and stop using the services. Additional export, consent, and memory controls may be added as Foundation Beta evolves.

12. Changes and Contact

We may update this Privacy Policy as Foundation Beta changes. Questions, privacy requests, and deletion requests may be sent to hello@121collaborative.ai.