Privacy Policy

This site is a self-help documentation tool. It helps you write down what happened at work as a neutral, dated record and draft written statements from it. This policy explains what we collect, how it is protected, who else handles it, and how to delete it. It is written in plain language on purpose.

Not legal advice. This tool provides self-help educational and documentation tools only. It does not provide legal advice or legal representation.

1. What we collect

• What you type. Your answers on the intake form and the messages you send in the chat. These may include names of coworkers and employers, dates, places and descriptions of events.
• What we create from it. The record, the incident groupings and the drafts the software writes for you.
• Basic technical data. Our hosting and security providers process your internet address and standard request details so the site can be delivered and protected. We also keep a short-lived counter for each visitor, based on a scrambled (hashed) version of the address, to stop automated abuse. It expires within an hour.

We do not ask you to create an account, and we do not collect payment details. Please do not enter government ID numbers, bank or card numbers, or passwords.

2. How we use it

Only to run the service for you: to build your record, answer your chat messages, write drafts, keep the site secure and prevent abuse. We do not sell your information, we do not show advertising, and we do not use your content to train our own models.

3. Who else handles your information

• Tally provides the intake form. Your form answers pass through Tally and are sent to us.
• Google (Gemini API) receives your text so its AI model can write your record and drafts. While this site is in test mode, we use a service tier whose terms may allow Google to use submitted text to improve its products, so please enter only made-up information. Before the site opens to real users we will move to a tier whose terms do not allow that, and we will update this page.
• Upstash stores your encrypted record and chat.
• Vercel hosts the site.
• Cloudflare provides the human check (Turnstile) that keeps automated programs out of the form. It looks at signals from your browser, not at anything you write.

We may also disclose information if the law requires it. Each provider has its own privacy terms and we choose providers carefully, but we cannot control them.

4. Encryption and security

• All traffic to and from the site uses HTTPS.
• Your record, chat and drafts are encrypted (AES-256-GCM) before they are saved, using a key that is kept separately from the stored data.
• Access to your record is by a long, random private link. We store only a scrambled version of it, never the link itself. Anyone who has your link can read your chat, so keep it private.
• The site uses security headers and a human check, and limits how fast anyone can send requests.

No system is perfectly secure. We cannot promise that unauthorized access will never happen.

5. What we do not write to logs

We have a strict logging rule. Our software never writes your answers, chat messages, names, employer names, records, drafts, private link, or AI output to server logs, error reports or analytics. Our logs contain only short fixed codes such as the name of an error. Our hosting providers keep standard request logs (time, page address, status and internet address). Your text travels in the body of a request, not in the page address, so it does not appear in those logs.

6. How long we keep it, and deleting it

• Your record, chat and drafts are deleted automatically 30 days after your last activity.
• You can delete everything at any time with the “Delete everything now” button in the chat. It removes your record, chat and drafts from our storage.
• Tally also keeps a copy of form submissions in our Tally account until we delete them. [Before launch: set Tally to delete submissions automatically and describe the period here.]
• If you copy, print or save a draft, that copy is in your hands and is not affected by deletion.

7. Cookies and similar technology

We do not set cookies for tracking, advertising or analytics, and we do not use analytics tools. Your chat text is not stored in your browser. The embedded form (Tally) and the human check (Cloudflare) may use cookies or similar technology that they need to work and to prevent abuse. Because we use none for tracking, the site does not show a cookie banner. If that changes, we will ask first.

8. Your choices and rights

You can delete your information yourself at any time (section 6). Depending on where you live, you may also have the right to ask what we hold about you, to correct it, or to have it deleted. Because we do not keep names or emails, we can only find a record if you give us your private link. To make a request, contact us at info@teamemployee.com.

9. Age

This service is for people 18 or older. We do not knowingly collect information from children.

10. Other people's information

Your account of events will probably name other people. Please describe only what you personally saw, heard or experienced, and avoid adding private details about others that are not needed to explain what happened.

11. Changes to this policy

We will post any changes here and update the date at the top. If a change is significant, we will say so on the home page.

12. Contact

Questions about privacy: info@teamemployee.com. [Company name and mailing address to be added before launch.]