Privacy Policy

What We Collect

When you upload a chat for analysis, we collect:

• Chat messages and metadata (timestamps, participant names)
• Your email address — only if you choose to provide it to receive your analysis results. It is optional and never required to use the service.
• Your IP address (for rate limiting only — not linked to profiles)
• Payment information (processed securely via our payment provider — we never see your card number)

A chat you upload may contain personal information about the other participant(s). You are responsible for ensuring you have any consent or legal basis required to upload it (see our Terms of Service). On request from you or another participant, we will delete the relevant data.

How We Use Your Data

• To perform AI-powered personality and communication analysis using OpenAI's GPT-4o models (including text embeddings for semantic analysis)
• To generate your analysis profile and results
• To email your results to you, if you provided an email address
• To process payments securely via our payment provider
• To prevent abuse via rate limiting
• To monitor errors and keep the service running reliably

We do not sell, share, or monetize your data in any way beyond providing the service.

Data Retention

• Analysis profiles (and any email address you provided) are stored for 30 days, then automatically deleted
• Payment records are retained as required by tax/legal obligations
• Chat data is stored in a secure, access-controlled database for up to 30 days for quality and auditability, then deleted. The original uploaded export is additionally encrypted at rest.
• You can request early deletion at any time by contacting us

Third-Party Services

We share data with these providers to deliver the service:

• OpenAI — chat content is sent for AI analysis (subject to OpenAI's privacy policy)
• Stripe / LemonSqueezy — payment processing (see Stripe's privacy policy or LemonSqueezy's privacy policy)
• Supabase — secure, encrypted database hosting
• Vercel — application hosting and privacy-friendly, cookieless usage analytics
• Upstash — Redis used for rate limiting (stores IP addresses only, not linked to profiles)
• Sentry — error monitoring to diagnose and fix technical issues

Cookies

We use minimal cookies required for the service to function. We do not use tracking cookies or third-party advertising cookies.

Your Rights

You have the right to:

• Request a copy of your stored data
• Request deletion of your data at any time
• Opt out of data processing (by not using the service)
• Lodge a complaint with your local data protection authority

Children

RedZone is not intended for users under 18 years of age. We do not knowingly collect data from minors.

Changes

We may update this policy from time to time. Material changes will be communicated via the website.

Contact

RedZone is operated by BEASTUNIVERSAL s.r.o. (Czech Republic), which acts as the data controller for the purposes of the EU GDPR.

For privacy questions or data requests: privacy@redzone.cloud