Chronist Privacy Policy

Introduction

Chronist ("we," "us," or "our") respects your privacy and is strongly committed to keeping the information you share safe. This Privacy Policy (this "Policy") describes how we collect, use, disclose, and process your personal data when you use Chronist's software, platform, APIs, documentation, and related tools (including all related software provided by us for building, deploying, hosting, and managing websites and software projects, collectively referred to as the "Service"). It also explains how you can access and update your personal information and the data protection rights available to you under the laws of your country or state. Please read this Policy carefully. By accessing or using the Service, you acknowledge that you have been notified of, and agree to, our practices regarding your personal information and data.

Please note that this Policy does not apply where we act as a Data Processor and process personal data on behalf of enterprise customers who use our commercial services (for example, if your employer provides you with a Chronist account for business use). In such cases, the use of data is governed by the customer agreement regarding access to and use of that service.

1. Personal Data We Collect

We collect the following categories of personal data:

A. Personal Data You Provide Directly to Us

We collect personal data when you create an account to use the Service or communicate with us. This includes:

• Account Information: When you register for a Chronist account or sign up to receive information about the Service, we collect identifiers such as your name and email address.
• Payment Information: If you request access to paid Chronist products and services, we (or our payment processor) will collect your payment information.
• Inputs and Suggestions: The Service allows you to submit content ("Inputs") and receive responses based on those Inputs ("Suggestions"). Chronist is designed based on local-first principles; therefore, this data is stored solely on your local device unless you choose to use future cloud features (such as synchronization, backup, or collaboration features). However, to provide AI functionality, personal data included in Inputs or references to external content may be temporarily processed by us or our AI Providers and reproduced in the Suggestions provided by us.
• Communication Information: If you communicate with us, we collect your name, contact information, and the contents of the messages you send.
• Feedback: During your use of the Service, you may provide feedback, including ideas and suggestions for improvement or ratings of Suggestions in response to Inputs ("Feedback"). If you provide Feedback regarding the Service, we may store the entire interaction as part of the Feedback.

B. Personal Data Automatically Received Through Use of the Service

When you use the Service, we automatically receive certain technical data. This includes:

• Device Information: Your device or browser automatically sends information about when and how you install, access, or use the Service. This information may include device type, browser information, operating system information, and mobile network or ISP. This information may vary depending on your settings and the type of device used to access the Service.
• Log Information: We collect information regarding the performance of the Service, including IP addresses, browser type and settings, error logs, and other ways you interact with the Service.
• Usage Data (Telemetry): We collect information regarding the date and time of access, browsing history, searches, links clicked, pages viewed, other ways you use the Service, and technology on the devices used to access the Service.
• Cookies and Similar Technologies: We and our service providers use cookies, pixels, scripts, or similar technologies to operate and administer the Service and to enhance your experience. These technologies help us recognize you, customize or personalize your experience, market additional products or services to you, and analyze and optimize usage of the Service (e.g., maintaining your settings).
• Location Information: For security and performance reasons (e.g., detecting unusual login activity or providing more useful Suggestions), we may use information such as IP addresses to determine the geographic location from which your device accesses the Service.

C. Information We Do Not Collect

We do not intentionally collect sensitive personal information or special categories of personal data, such as genetic data, biometric data for the purpose of uniquely identifying a natural person, health information, or religious information. Furthermore, we do not knowingly collect information from children under the age of 18, nor do we direct the Service or content to children under the age of 18. If we discover or suspect that a user is under the age of 18, we will investigate and, where appropriate, delete the personal data and/or the account.

2. How We Use Personal Data

We may use personal data for the following purposes:

• Providing and Maintaining the Service: To provide and maintain the Service, including optional features that enhance functionality and user experience (including future cloud synchronization features).
• Creating and Managing Accounts: To create, manage, and administer your account, including facilitating payments and responding to inquiries.
• Improving and Developing the Service: To improve and develop the Service, including debugging and identifying or fixing issues that impair functionality, and conducting research.
• Communication: To communicate with you, including sending updates, information about the Service, and events.
• Preventing Fraud and Abuse: To prevent, detect, and investigate fraud, abuse, security incidents, and violations of our Terms of Service.
• Legal Compliance and Protection: To comply with legal obligations and to protect the rights, safety, privacy, and property of users, us, or third parties.
• Dispute Resolution: To investigate and resolve disputes or security issues.
• Enforcing Agreements: To enforce our Terms of Service and other applicable agreements.

Limitations on Model Training

We do not use your Inputs or Suggestions to train our models, nor do we authorize third parties to use them for training, unless one of the following applies:

1. You have explicitly reported them to us (e.g., submitted as Feedback).
2. You have explicitly consented to such use for training purposes (opted in via settings).

We provide instructions within the Service on how you can manage your settings regarding training (settings regarding the use of Inputs and Suggestions). Please note that data flagged for security review may be analyzed to improve our ability to verify and enforce compliance with our Terms of Service, but this is distinct from "training" to enhance the knowledge base of generative AI models.

Aggregated and Anonymized Data

We may aggregate or de-identify (anonymize) personal data so that it cannot identify you, and use that information for the purposes described above, such as analyzing usage of the Service, improving or adding features, and conducting research. We maintain de-identified information in that form and will not attempt to re-identify it (return it to a state where individuals can be identified), except as required by law.

3. How We Share Personal Data

We may disclose your personal data in the following situations:

Service Providers and Business Partners

We may disclose personal data to third-party vendors and service providers who assist in our business operations and help provide and improve the Service. This includes third-party hosting, cloud infrastructure, AI Model Providers (including Anthropic), analytics, customer support, safety monitoring, communications, payment processing, compliance services, and IT providers. These parties process personal data only as necessary to perform services on our behalf, in accordance with our instructions and applicable law. Specifically, to provide AI functionality, your Inputs are transmitted to AI Model Providers, but this is done under strict confidentiality agreements and data processing agreements.

Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or other corporate transaction, personal data may be disclosed to counterparties or advisors as part of due diligence or transferred as part of the transaction.

Legal Compliance and Protection of Rights

We may disclose personal data to government authorities or other third parties if we determine it is necessary to: (i) comply with applicable laws, regulations, or legal processes; (ii) respond to lawful requests or investigations; (iii) protect the safety, rights, or property of persons; (iv) prevent fraud, security incidents, or other illegal activities; (v) enforce our Terms of Service or other legal rights; or (vi) protect ourselves from legal liability.

Affiliates

We may share personal data with our affiliates (entities that control, are controlled by, or are under common control with us). Affiliates will use personal data in a manner consistent with this Privacy Policy.

Third-Party Services and Integrations

The Service may include integrations or links to third-party websites, applications, or services. If you choose to interact with these third parties, your personal data will be disclosed directly to them and will be subject to their own terms and privacy policies. Our linking to or integration with third parties does not imply endorsement or affiliation.

Business Account Administrators

If you create an account using an email address associated with an organization (e.g., your employer), we may disclose account-related information (such as email address and account status) to that organization. If you are part of a business or enterprise account, administrators can access and manage your usage of the Service.

Other Users and Third Parties with Whom You Share Information

Certain features of the Service may allow you to share Inputs, Suggestions, or other content with other users or third-party applications. Information you voluntarily share with those parties is subject to their respective terms and privacy policies.

With Your Consent

We may disclose personal data when you have granted permission, including when doing so through features of the Service designed to share information.

Subprocessors

If you require information on third parties (Subprocessors) we engage for commercial use of the Service where we act as a Data Processor, please contact us at info@skunc-ai.com.

4. Data Retention

We retain your personal data only for as long as necessary to effectively operate the Service and support legitimate business needs such as legal compliance, safety, dispute resolution, and enforcement of agreements. The appropriate retention period depends on the purpose for which the personal data was collected, its sensitivity, potential risks associated with its use or exposure, and applicable legal requirements.

Retention of Local and Cloud Data

Chronist is designed as a local-first application.

• Local Use: If you use only the local features of the Service, your Inputs, Suggestions, and knowledge base are stored only on your local device and are not stored on our servers.
• Cloud Features (Optional): If you choose to use future cloud features (such as synchronization, backup, or collaboration features), we will retain your content on our servers (or our vendors' servers) for the period necessary to provide such features or until you delete such content.

Data temporarily transmitted to provide AI functionality is not retained after processing is complete, except for the minimum period necessary for safety monitoring and system logs.

Your settings may also affect how long we retain specific types of data. For example, some temporary interactions with the Service may not appear in your history and may only be stored for a limited period for purposes related to safety and system monitoring.

When personal data is no longer needed, we and our service providers follow procedures to delete, erase, de-identify, or anonymize that data in accordance with applicable law.

5. Security

We implement commercially reasonable technical and organizational measures (such as encryption of communications) designed to protect personal data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction.

Local Data Security

Because Chronist is a local-first application, the security of data stored on your device relies heavily on your own device's security measures (password protection, disk encryption, anti-malware, etc.). We cannot be responsible for security breaches in your local environment. We strongly recommend that you take appropriate measures to protect your own device and data.

Please also be aware that no method of transmission over the Internet or method of electronic storage is completely secure. Please exercise caution when deciding what information to share with the Service. We are not responsible for the circumvention of any privacy settings or security features on the Service or third-party websites linked through the Service.

6. Your Rights and Choices

Depending on the laws of your country or region of residence, you may have specific rights regarding your personal data. These may include rights to access, delete, correct, or transfer (portability) your personal data, rights to object to or restrict our processing, or rights to withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with your local data protection authority.

To exercise these rights, you (or an authorized agent) may contact us at info@skunc-ai.com. We may ask for information to verify your identity before processing your request. If we deny your request, you may appeal by sending an email to the same address. We will not discriminate against you for exercising your privacy rights under applicable law.

Rights available to you may include:

• Right to Know: The right to know the categories of personal data we collect, the purposes of use, and the types of third parties with whom we share it.
• Access and Portability: The right to request a copy of the personal data we hold about you and, where applicable, to request it in a portable format.
  • Note: Since Chronist is local-first, most of your knowledge base (content) is already on your device and directly accessible by you.
• Deletion: The right to request the deletion of personal data collected in connection with the use of the Service (subject to certain exceptions).
  • Note: Data on your local device can be completely deleted by you. Please contact us regarding the deletion of account information on our servers.
• Correction: The right to request correction of inaccurate personal data we hold about you.
  • Note: While we make reasonable efforts to respond to correction requests, due to the nature of AI models, we cannot guarantee the accuracy of "Suggestions" generated by the Service.
• Objection: Objection to certain types of processing. Where applicable, we will stop processing unless we have compelling legitimate grounds to continue.
• Restriction: The right to restrict our processing of personal data in limited circumstances, such as when a correction request is pending.
• Withdrawal of Consent: The right to withdraw consent where the legal basis for our processing is your consent. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

Absence of Automated Decision Making

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (e.g., medical or financial status).

Prohibition of Sale and Targeted Advertising

We do not "sell" or "share" personal data for cross-context behavioral advertising, nor do we process personal data for "targeted advertising" purposes (as these terms are defined under applicable U.S. state privacy laws). Furthermore, we do not process sensitive personal data for the purpose of inferring characteristics about a consumer.

International Transfers

We process your personal data on servers located in various jurisdictions, including the United States, for the purposes described in this Privacy Policy (including API transmission to our AI Provider, Anthropic). Data protection laws vary by country, but regardless of where it is processed, we apply the protections outlined in this Policy to your personal data and transfer data only in accordance with legally valid transfer mechanisms. If you are a user in the European Economic Area (EEA), when accessing the Service, your personal data may be transferred to countries outside the EEA and the UK (such as the United States). When information is transferred outside the EEA or UK, we require adequate levels of data protection.

7. Region-Specific Disclosures

In some jurisdictions (such as the European Economic Area), we are required to make specific disclosures about how we handle your personal data. The table below supplements this Privacy Policy by providing details regarding the purpose of collection, the types of data collected, and the legal basis for processing. Please also refer to "1. Personal Data We Collect," "2. How We Use Personal Data," and "4. Data Retention" above for more details.

8. Changes to Privacy Policy

We may update this Privacy Policy from time to time. If we do, we will post the updated version and the effective date at the top of this page, unless another type of notice is legally required. By continuing to use the Service after changes to this Privacy Policy, you are deemed to have agreed to such changes.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at info@skunc-ai.com.