Privacy Policy

Summary

Konsil is an invite-only AI council operated by Konsil Pte. Ltd. We collect the account, waitlist, conversation, memory, sharing, and usage data needed to run the service. We do not sell personal data, use it for advertising, or use your conversations to train our own models.

What we collect

• Account data: your email address, Google OAuth profile identifiers, name, image, and role or access status.
• Waitlist data: the use case you submit, status, confirmation and invitation delivery metadata, and coarse abuse-prevention data such as waitlist attempt timestamps.
• Conversation content: messages, generated answers, decision memo structures, source links, thread titles, and image references you add to a chat.
• Memory facts: short durable facts Konsil extracts or that you add manually so future council runs can tailor advice.
• Sharing data: frozen conversation or memo snapshots, visibility settings, revocation status, and lightweight memo view or CTA events.
• Usage telemetry: model names, provider family, token counts, latency, status, costs, search counts, error details, and related operational metadata.
• Browser-local data: IndexedDB conversation cache, per-tab private chats in sessionStorage, theme preference, and strictly necessary auth/session state.

How we use your data

• To authenticate you, manage invite-gated access, and keep your threads available across devices.
• To run the council workflow: advisor responses, challenge rounds, synthesis, decision memo creation, citations, and optional web evidence.
• To personalize advice with memory facts when memory is enabled for a non-private chat.
• To operate sharing, revocation, public memo visibility, usage limits, cost accounting, abuse prevention, reliability debugging, and support.
• To send waitlist confirmations, invitations, account-related notices, and critical service updates.

AI providers and web search

When you invoke the council, the relevant parts of your prompt, attached images, prior conversation context, and selected memory facts may be sent to configured AI providers through Vercel AI Gateway or direct provider APIs. Search-warranting prompts may also be sent to a search provider to collect evidence sources. Advisors may see anonymized versions of other advisors' answers during challenge rounds. Konsil uses this content to produce the response you requested. Provider handling of API data is governed by the applicable provider terms and data-processing commitments.

Storage and security

Primary app data is stored in Neon Postgres. Image uploads use private Vercel Blob storage when enabled. Resumable non-private streams may use Redis when configured. Waitlist and invitation email delivery uses Resend. Text and JSON user-content columns are application-encrypted at rest before they are written to Postgres. This protects stored database rows, but it is not end-to-end encryption: the server decrypts content while operating features you request.

Service providers and transfers

Konsil relies on infrastructure and AI providers that may process data outside Singapore, including authentication, hosting, storage, email delivery, AI model access, search, and operational telemetry services. We use these providers to operate Konsil and expect them to protect the data they process under their service terms, security controls, and data-processing commitments.

Private mode

Private mode narrows Konsil-side persistence. Private chats are kept in this browser tab, are not written as server threads, skip durable memory extraction, skip saved memory injection, use an in-memory job buffer, and keep images as in-flight data rather than uploading them to Blob. AI providers still see the prompts and images they answer while the private run is in progress, and operational telemetry may still record cost and rate-limit data.

Sharing

If you create a share link, Konsil stores an encrypted frozen snapshot of that conversation or memo. Anyone with the link can view an active share. Conversation shares are unlisted and marked noindex. Memo shares can be unlisted or public; public memos may be indexed by search engines. Revoking a link disables Konsil's active copy but may not remove external screenshots, caches, or forwarded copies.

Your choices

• Delete saved conversations from the sidebar.
• Review, edit, or clear memory facts from the Memory settings page.
• Use Private mode for chats you do not want stored as durable Konsil threads.
• Revoke shared links from the share dialog.
• Request access to your personal data, correction of inaccurate data, account export, deletion, or withdrawal of consent by emailing privacy@konsil.app.

Retention

We keep account, conversation, memory, waitlist, sharing, and telemetry records while they are needed to provide the service, comply with legal or operational requirements, resolve disputes, prevent abuse, and maintain security. Deleted conversations, revoked links, and cleared memories are removed from active app records, though backups, provider logs, search-index caches, and abuse-prevention records may persist for a limited period before aging out.

Cookies

Konsil uses strictly necessary cookies and browser storage for authentication, authorization, session continuity, waitlist flow state, and theme preference. We do not use advertising cookies.

Children

Konsil is not directed at children under 13 and is not intended for their use.

Changes

We will update this page when the policy changes and revise the date at the top. For material changes, we will notify active users by email or in-app notice when practical.

Contact

Questions or privacy requests for Konsil Pte. Ltd.? Email our data protection contact at privacy@konsil.app.