Privacy policy

What we collect

When you sign in we receive your email address and display name from our identity provider (signin.ounie.com). When you draft a set we record the structured facts you supplied about the business — its name, website, contact email, jurisdiction hint, description, billing model and any data types or processors you listed — along with the documents produced, their assumptions, their gaps, and a citation pointer to the brain page each clause came from.

What we do not keep

We do not store the raw page text we read from a business's website, nor the brain context retrieved to ground a draft. Both are used inside the request that drafted the documents and then discarded; only the structured facts and the finished documents persist. We do not track you across the web: there are no third-party analytics scripts, no advertising pixels, and no session replay. We do not sell, share or resell anything you generate.

Where data lives

Application data (runs, documents, share tokens, credit ledger entries) is stored in a single Neon Postgres database hosted in the US. Your brain content itself stays on ounie.com — Policy Studio reads it at drafting time through Ounie's API as you, and never keeps a copy of your sources.

Hosted documents

Each drafted document is published at an unlisted URL under /p/<token>. The token is 18 bytes of randomness, and the page is served with noindex as both a meta tag and an HTTP header, so it is not indexed by search engines. Anyone holding the link can read the page. You can revoke it at any time, which stops it resolving on the next request; restoring it re-publishes the same URL.

What we send to third parties

To draft a document we send the facts you supplied, and any page text we read, to OpenRouter, which routes it to the language model that writes the draft. When you supply a URL we send that URL to Firecrawl, which fetches and returns the page as text. We send no more than is needed to produce the draft, and neither provider is given your identity.

Payments

Payments happen on ounie.com, where Stripe processes credit purchases. This product never sees your card number; it only reads and debits your Ounie credit wallet. Stripe's privacy policy lives at stripe.com/privacy. Payments made on the keyless x402 rail settle on the Base network in USDC; those settlements are public on chain and carry no account of ours or yours.

Deletion

To delete your account or download your data, open a privacy ticket. We respond within 7 days and complete the deletion within 30. Deleting a run deletes its documents and takes their hosted pages offline immediately.

Contact

/contact · routed to ounie@ounie.com