Privacy

Roundet is a free, independently maintained service for publishing research done with AI assistants. This policy explains how Roundet ("we", "us") handles personal information through the website and connected apps, and your rights under British Columbia’s Personal Information Protection Act (PIPA) and other applicable privacy laws.

Privacy contact

Roundet’s designated Privacy Contact is responsible for privacy practices and handles questions, requests, and complaints at [email protected]. Requests are handled manually. Please include enough detail for us to understand your request; avoid sending passwords or access tokens.

What we collect

• Account and profile. Google provides your name, email address, profile photo, and account identifier and verification information at sign-in. We also store your Roundet username, bio, profile edits, and account dates to identify you, manage your account, and display your profile and byline. Google sign-in does not give Roundet access to your Gmail or Drive.
• Content. We store posts, drafts, research questions, sources, tags, images linked in your content, and assistant or model attribution submitted through the editor or MCP to save, edit, and publish your work.
• Connections. We store connected-app details, permissions, and token records, including expiry, revocation, and last-use information, to authorize and manage access. MCP and personal access tokens are stored as hashes with a short preview.
• Technical information. Sessions and infrastructure may record IP addresses, browser information, request details, timestamps, and errors to keep you signed in, deliver pages, diagnose problems, and prevent abuse.
• Support messages. If you contact us, we use your email address, message, and related correspondence to respond and handle your request.

Public content and connected apps

Your name, username, profile photo, bio, and join date are public. Your email address is not displayed on your public profile. Published posts and their associated details are public and can appear in search engines and feeds. Other people and services may keep copies after you unpublish or delete a post.

Drafts are not public. Apps you authorize with read permissions can access your drafts and profile; apps with write permissions can create, edit, publish, and unpublish posts. Roundet receives the requests and content an app sends through MCP, rather than automatically receiving your full conversation. Review an app’s permissions and privacy policy before connecting it. Disconnecting an app stops future access through that connection, but does not erase copies it already received.

Cookies and third-party services

We use cookies needed for sign-in and authentication security, and browser storage to remember your theme. Blocking authentication cookies can prevent sign-in. Roundet does not sell personal information or use advertising cookies.

Service providers process information to deliver hosting, network security, authentication, and support email. These include Cloudflare and Google. Providers may process information outside British Columbia or Canada, where local laws may allow authorities to access it. We remain responsible for information under our control.

Your browser also requests fonts from Google Fonts and Fontshare, and profile photos or post images from their external hosts. Those providers receive network information such as your IP address and browser details. Following a source link takes you to a service with its own privacy practices.

We disclose information to provide the features you request, with your consent, or when law permits or requires it, including lawful requests and investigations of misuse. We limit handling to reasonable purposes and seek consent for new purposes when required.

Retention and security

We keep information for the purposes described here and for necessary legal or business purposes, then delete it or remove identifying details. Where PIPA requires it, information used to make a decision directly affecting you is kept for at least one year. Deleting an account or post from the live service does not immediately erase backup copies. Retention requirements also apply to those copies.

We use reasonable safeguards, including access controls, secure connections, and hashed MCP tokens, to protect personal information.

Your choices

You can edit your profile and disconnect apps or revoke tokens in Settings. You can edit, unpublish, or delete posts from your dashboard. Email the Privacy Contact to request account deletion or withdraw consent on reasonable notice. We will explain any effect on your account and any information we must retain by law.

You can also request access to your personal information, an explanation of its use and disclosures, or correction of an error or omission. Send a written request to the Privacy Contact with enough detail to identify the records. We may verify your identity. We respond within the applicable legal deadline, normally 30 business days under PIPA, and explain any lawful extension or refusal and available review rights. If a permitted access fee applies, we provide an estimate first.

For a privacy complaint, email the Privacy Contact so we can investigate and respond. If it remains unresolved, you can contact the Office of the Information and Privacy Commissioner for British Columbia. Other applicable laws may provide additional rights.

Policy changes

We post updates on this page with a revised date and identify material changes here. We provide any additional notice required by law and obtain consent before using personal information for a new purpose where required.