Privacy Policy

Information you provide:

• Account information: Email address, display name (optional), and avatar (optional) when you create an account.
• Interest data: Topics and interests you share during onboarding calls with the Bipi agent.
• Report queries: The topics and questions you submit to The Reporter agent.
• Votes and interactions: Your upvotes, downvotes, and commentary requests.
• Contact submissions: Name, email, reason, and message when you use our contact form.
• Journalist applications: Name, email, portfolio URL, expertise areas, and statement.
• Payment information: Processed by Stripe. We store your Stripe customer ID and subscription ID but never your card numbers, bank details, or payment credentials.

Information collected automatically:

• Usage analytics: Page views, feature usage, and session data via Vercel Analytics.
• Device information: Browser type, operating system, and language preferences.
• Authentication cookies: Session tokens managed by Supabase Auth for maintaining your login state.

• Service delivery: To generate reports, process commentary requests, manage your credit balance, and deliver personalized preset suggestions.
• Personalization: To tailor report suggestions based on your stated interests.
• Communication: To send authentication codes, credit refund notifications, and respond to contact form submissions.
• Platform improvement: To analyze usage patterns, fix bugs, and improve features.
• Billing: To process payments, manage subscriptions, and maintain transaction records.
• Security: To prevent abuse, enforce rate limits, and protect the Platform.

We do not sell your personal information to third parties. We do not use your data for advertising targeting beyond our own Platform's sponsored content.

Your data is stored in Supabase (PostgreSQL) hosted infrastructure. Authentication is managed through Supabase Auth.

• Account data: Retained while your account is active. Deleted upon account deletion request.
• Reports and commentary: Retained while published. Deleted reports are permanently removed from the database.
• Credit transactions: Retained for billing and audit purposes for the duration of your account.
• Contact messages: Retained for 24 months unless a longer retention is required for an ongoing matter.
• Analytics data: Aggregated and anonymized. Individual session data retained per Vercel Analytics retention policy.

We share data with third-party service providers only as necessary to operate the Platform. These providers fall into the following categories:

• Payment processing: A PCI-DSS compliant processor handles your payment method and billing. We never store card numbers or bank details.
• Authentication and data storage: Managed by cloud infrastructure providers that store your profile, reports, and interactions.
• Voice and AI processing: Voice call audio is processed by specialized AI providers during reporter calls and onboarding. Transcripts and interest data are processed for report structuring and recommendation generation. Your personal identity is not shared with AI inference providers.
• Web search: Report generation involves real-time web search through a data provider. Search queries are sent without your personal information attached.
• Email delivery: A transactional email provider receives your email address to deliver authentication codes and notifications.
• Hosting and analytics: Our hosting provider receives standard web request data. Aggregate analytics are collected without personally identifiable information.
• Advertising: Third-party ad networks on report pages may use cookies for ad personalization per their respective privacy policies.

Each provider operates under their own privacy policy and data processing agreements. A specific list of providers is available upon request by contacting us.

We use the following cookies:

• Authentication cookies: Essential. Managed by our authentication provider to maintain your session. Cannot be disabled without losing login functionality.
• Analytics: Aggregate usage statistics collected by our hosting provider. No personally identifiable information is collected.
• Advertising: Third-party cookies on report pages for ad serving and personalization. You can manage ad personalization through your browser settings or the ad network's preference controls.

We do not use tracking pixels, fingerprinting, or cross-site tracking technologies beyond those listed above.

You have the right to:

• Access your data: View your profile, reports, and transaction history through your Dashboard.
• Correct your data: Update your display name and interests through Settings.
• Delete your data: Delete individual reports from your Dashboard. Request full account deletion by contacting us.
• Export your data: Request a copy of your data by contacting us at contact@biasedbipartisans.com.
• Opt out of marketing: We do not send marketing emails. All emails are transactional (authentication codes, contact form responses).

California residents (CCPA), EU residents (GDPR), and UK residents have additional rights under their respective privacy laws. Contact us to exercise these rights.

We implement security measures including:

• Encrypted data transmission (HTTPS/TLS) for all Platform communications.
• Passwordless authentication via email one-time codes (no passwords stored).
• Row-level security policies on all database tables ensuring users can only access their own data.
• PCI-DSS compliant payment processing (card data never touches our servers).
• Environment variable isolation for API keys and secrets.

No system is 100% secure. If you discover a security vulnerability, report it to contact@biasedbipartisans.com.

The Platform is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us and we will delete it.

Your data may be processed in the United States and other countries where our service providers operate. By using the Platform, you consent to this transfer. We ensure appropriate safeguards are in place with our service providers.

We may update this Privacy Policy periodically. Material changes will be communicated via email or Platform notification. The "Last updated" date at the top reflects the most recent revision.

For privacy-related questions or requests, contact us at contact@biasedbipartisans.com or through our contact form.