Back

Legal

Privacy Policy

Last updated: April 28, 2026

1. Who we are

Concordance AI ("we", "us", "our") operates the service available at useconcordance.com. By using the Service you agree to this Privacy Policy. This Policy explains what data we collect, why, and how we use it.

2. Data we collect

We collect and store the following categories of personal data:

  • Account data: email address, encrypted password, sign-up date, account preferences.
  • OAuth data: information provided by third-party login providers (e.g. Google) when you use social authentication, including your name and email address.
  • Query data: the full text of every question you submit to the Service.
  • Response data: all AI-generated responses associated with your queries, including individual model responses and synthesized answers.
  • Usage data: query count, subscription status, query limits, feature usage.
  • Feedback and ratings: any ratings, feedback messages, or support communications you send.
  • Technical data: IP address, browser type and version, device type, operating system, access timestamps, referring URLs.
  • Payment data: subscription status and billing history (payment card details are processed by our payment provider and not stored by us directly).
  • Cost metadata: per-query cost and performance data for operational purposes.

3. Legal bases for processing (GDPR)

Where GDPR applies, we process your personal data on the following legal bases:

  • Contract (Art. 6(1)(b)): processing necessary to provide the Service you signed up for, including running queries and managing your account.
  • Consent (Art. 6(1)(a)): where you have explicitly agreed to this Policy at registration. You may withdraw consent at any time by deleting your account.
  • Legitimate interests (Art. 6(1)(f)): improving the Service, preventing fraud, ensuring security, and conducting analytics — where these interests are not overridden by your rights.
  • Legal obligation (Art. 6(1)(c)): where required by applicable law.

4. How we use your data

We use collected data to:

  • Provide, operate, maintain, and improve the Concordance AI Service.
  • Authenticate users and manage accounts and subscriptions.
  • Enforce usage limits and subscription plans.
  • Analyze usage patterns to improve AI response quality and product features.
  • Detect and prevent abuse, fraud, spam, and unauthorized access.
  • Communicate service updates, policy changes, or important notices.
  • Use anonymized and aggregated data for research, product development, and commercial purposes without restriction.
  • Comply with legal obligations.

5. Data sharing and disclosure

We may share your data with:

  • AI model providers via OpenRouter: your query text is transmitted to third-party AI model providers to generate responses. These providers process your data under their own privacy policies. By using the Service, you consent to this transmission.
  • Infrastructure providers: Supabase (database hosting and authentication), cloud hosting providers, and CDN services.
  • Analytics and monitoring services: tools used to monitor service performance and prevent abuse.
  • Payment processors: for handling subscription billing.
  • Legal authorities: if required by applicable law, court order, regulatory demand, or to protect our rights, property, or safety.
  • Business transfers: in the event of a merger, acquisition, restructuring, or sale of all or part of our assets, your data may be transferred to the acquiring party. We will notify you via email or in-app notice.

We reserve the right to use anonymized, aggregated query and usage data for research, benchmarking, model improvement, and commercial purposes without restriction and without notice.

6. International data transfers

Your data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your jurisdiction. Where required, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms, to protect your data during international transfers.

By using the Service, you consent to the transfer of your data to our service providers and AI model providers globally, including in the United States and other countries.

7. Data retention

We retain your personal data for as long as your account is active. Following account deletion:

  • Account and profile data: deleted within 30 days.
  • Query and response data: deleted within 90 days, unless retention is required by law.
  • Aggregated, anonymized data derived from your usage may be retained indefinitely.
  • Billing records: retained for up to 7 years for legal and tax compliance purposes.

We reserve the right to retain certain data longer as required by law or for legitimate business purposes including fraud prevention and dispute resolution.

8. Your rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: request a copy of the personal data we hold about you.
  • Rectification: request correction of inaccurate data.
  • Erasure: request deletion of your data (subject to legal retention obligations).
  • Restriction: request that we limit processing of your data in certain circumstances.
  • Portability: receive your data in a structured, machine-readable format.
  • Objection: object to processing based on legitimate interests.
  • Opt-out of data use for AI training: contact us to request that your query data not be used in anonymized form for model improvement. Note this does not affect data already processed.

To exercise these rights, contact us at the in-app Contact us form (menu icon, top-left). We will respond within 30 days. We may require identity verification before fulfilling requests.

9. Automated decision-making

We use automated systems to enforce usage limits and detect abuse. These decisions are based on usage patterns and account data. If you believe an automated decision has incorrectly affected your account, you may contact us to request human review.

10. Security

We implement reasonable technical and organizational security measures to protect your data against unauthorized access, loss, or disclosure. However, no method of transmission over the internet or electronic storage is 100% secure. You use the Service at your own risk and we cannot guarantee absolute security.

11. Cookies and tracking

We use cookies and similar technologies strictly for authentication, session management, and service functionality. We do not use third-party advertising or tracking cookies. By using the Service, you consent to our use of these essential cookies.

12. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately and we will delete it.

13. Changes to this policy

We may update this Privacy Policy at any time. We will notify you of material changes via email or in-app notification at least 14 days before they take effect. Continued use of the Service after changes constitutes your acceptance of the updated Policy.

14. Contact

For privacy questions or to exercise your rights, contact us at the in-app Contact us form (menu icon, top-left).