Privacy Policy

• Account information. When you sign in with Google, Apple, or GitHub we receive your name and email address. Magic-link sign-in uses only your email address. Guests can use the service without an account; we assign a random guest identifier to keep your session together.
• Chats and files. Your conversations, and any files you attach, are stored so you can return to them. Temporary chats are deleted automatically when you leave them.
• Usage analytics. With your consent where required (see Cookies below), we collect product interactions through Google Analytics, such as which part of the service was visited, whether a chat was started or completed, response timing, broad error categories, feature settings, copies and shares, and the general channel that brought someone to the service. For signed-in users, we send a pseudonymous account identifier and broad account classifications such as plan, VIP, and internal/test status, not their name or email. Google Analytics may derive approximate location and device information, and we retain only the referring site's domain for external referrals. We never send message or search content, file contents or names, email addresses, raw error messages, chat identifiers, or private invite and share tokens to analytics.
• Payment information. Subscriptions are processed by Stripe. We never see or store your card details; we keep only your subscription status and a Stripe customer reference.

To answer you, your messages (and attachments, where supported) are sent to the AI models participating in your chat. Most models are reached through OpenRouter; some are reached through their provider directly (for example Google). If you enable web search, your search queries are sent to our search provider (Exa). These providers process your content to generate replies and results; they do not receive your account identity.

• Chat content is encrypted at rest (AES-256-GCM). You can additionally enable a passphrase lock on your account, in which case your chats are further encrypted with a key derived from a passphrase only you know.
• All traffic between your browser and our servers uses HTTPS.
• Shared chats are visible only to people who have the unguessable share link, and you can unshare a chat at any time.

pellmell.ai is operated from the United States. Your data is processed and stored on servers in the United States, and the third-party processors listed below may operate globally. If you use the service from outside the US, you consent to your data being transferred to and processed in the United States.

We use a small number of essential cookies for signing in and keeping your session. These are required for the service to work.

For analytics we use Google Analytics 4. On the website, Google Consent Mode controls browser analytics storage. In regions that require opt-in consent (the EEA, the UK, and Switzerland), analytics cookies are not set unless you accept them in the cookie banner. Before consent, Google may receive cookieless measurements that describe consent state and basic activity, but no analytics cookie or persistent analytics identifier is stored in your browser. These measurements do not include your account identifier or detailed product interactions.

The mobile app uses the same regional default but does not send app analytics until its consent and account classification are ready. You can change the mobile choice in the app's privacy settings. Turning mobile analytics off disables collection and resets the app's analytics identifier. When you are signed in, the pseudonymous Pellmell account identifier described above lets us recognize the same account across web and mobile; we do not send your email or chat content for this purpose. Everywhere else analytics runs by default and can be turned off at any time. The control below changes the website choice for this browser.

We rely on the following processors to run the service:

• OpenRouter and AI model providers — to generate model replies
• Exa — web search, when a chat performs a search
• Google, Apple, and GitHub — sign-in
• Stripe — payments and subscriptions
• SendGrid — sign-in and account emails
• Google Analytics — usage analytics (subject to your consent choices)
• Our hosting and database providers, which store data on our behalf

Chats remain until you delete them, and deleting a chat also deletes its attached files. Temporary chats are removed automatically when you leave them. If you want your account and its data deleted, contact us at the address below and we will remove them.

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. You can exercise most of these directly in the product (deleting chats, unsharing links, disabling analytics cookies); for anything else, contact us and we will help.

The service is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect data from them.

If we make material changes we will update this page and the date at the top. Continued use of the service after a change means you accept the updated policy.

Questions or requests about your data: privacy@pellmell.ai