Privacy Policy

Council AI is a product of Kratoscode, operated from Bengaluru, India. This policy explains what information we collect when you use the service at topaicouncil.com, why we collect it, who we share it with, and the choices you have. We have tried to write it in plain language rather than dense legalese — if anything here is unclear, email us at hello@kratoscode.com and we will explain.

Who this policy covers

It applies to everyone who visits the site or creates an account — guests running a quick council, registered free users, and Premium subscribers alike. By using Council AI you agree to the handling of information described below. If you do not agree, please stop using the service.

Information we collect

Account information. When you sign up we store your email address, an optional display name, and a securely hashed version of your password. We never store your password in plain text. We also record when your email address was verified.

Email verification and password resets. To confirm you own your email address, and to let you recover a forgotten password, we generate single-use links. We store only a hashed form of each token, never the raw link, and the links expire automatically.

Your prompts and results. The questions you send to a council, the answers the models return, the peer-review scores, and the final synthesis are saved to your account so you can revisit past sessions. You can delete your account, which removes this history.

Usage and billing records. For Premium subscribers we keep a record of your plan status, renewal date, and payment history. We store an identifier for your subscription so we can manage renewals and cancellations. We do not see or store your full card details — those are handled entirely by our payment processor (see below).

Technical data. Like most websites, our hosting and analytics tools automatically receive basic technical information such as your approximate location (country level), browser type, and the pages you visit. We use your country only to show the correct currency on the pricing page.

Cookies, advertising and analytics

We use a small number of cookies and similar technologies. A session cookie keeps you logged in after you sign in — without it, the service cannot remember who you are. We also use Google Tag Manager and Google Analytics to understand which features are used and how the site performs, and a lightweight traffic measurement script.

This site may display ads served by Google AdSense. Google and its partners use cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the internet. You can opt out of personalised advertising by visiting Google Ads Settings. For more on how Google uses data from sites that use its services, see Google's partner policy. You can also manage cookies through your browser settings, though disabling the session cookie will stop you from staying logged in.

How your prompts are processed

Council AI works by sending your question to several AI models. To do that, your prompt is transmitted to the AI providers whose models make up the council (for example Google, Groq and OpenRouter, depending on the roster). Those providers process the text to generate a response. We only send the content of your prompt and the context needed to answer it. Please avoid submitting sensitive personal information, passwords, or confidential data in a prompt.

Third-party services we rely on

We keep our own footprint small and depend on a few trusted providers, each with their own privacy practices:

• Supabase — our database host, where your account and session data are stored.
• Vercel — application hosting and delivery.
• Razorpay — payment processing for Premium subscriptions. Razorpay handles your card, UPI or bank details directly; we never receive them.
• Resend — sends transactional emails such as verification and password-reset messages.
• Google (Tag Manager, Analytics, AdSense) — analytics and advertising, as described above.
• AI providers (e.g. Google, Groq, OpenRouter) — process your prompts to generate council answers.

How long we keep your data

We keep your account and session history for as long as your account exists. When you delete your account, your profile, prompts, results and related records are removed. Expired verification and reset tokens are cleared automatically. Some records may persist briefly in backups before being overwritten.

Your choices and rights

You can update your name or delete your account at any time. You can opt out of personalised ads via the Google settings linked above, and control cookies through your browser. If you would like a copy of the data we hold about you, or want it erased, email hello@kratoscode.com and we will act on reasonable requests.

Children

Council AI is not intended for children under 16, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will remove it.

Changes to this policy

We may update this policy as the service evolves or as our providers change. When we do, we will update the date at the top of this page. Significant changes will be highlighted on the site.

Contact

Questions about your privacy or this policy? Write to us at hello@kratoscode.com, or use the contact page. You can also review our Terms of Use.

This policy is provided in good faith for a preview product and is not legal advice. If you operate in a regulated market, have a lawyer review it before relying on it.