1. Information We Collect
Sweetheart AI collects minimal information necessary to provide our data analytics services:
- Account Information: Email address, name, and authentication data from Google/GitHub OAuth
- Uploaded Data: CSV and Excel files you upload for analysis — stored temporarily for processing
- Usage Data: Dashboard interactions, generated reports, and chat history
- Technical Data: IP address, browser type, and device information for security and debugging
2. AI & LLM Data Processing
Sweetheart AI uses large language models (LLMs) including OpenAI and other providers to analyse your data and generate insights. You should be aware of the following:
- Data sent to AI models: Column names, data samples, and statistical summaries from your uploaded files may be sent to LLM providers to generate chart configurations and insights.
- No personal data intentionally sent: We do not deliberately transmit personally identifiable information to LLM APIs. However, if your data file contains personal data in column values, you are responsible for ensuring you have the right to process it.
- Bring Your Own Key: You can configure your own LLM API keys in Settings. When using your own key, requests go directly from our server to your chosen provider under their privacy terms.
- LLM providers: By default we use OpenAI (governed by OpenAI's privacy policy). We do not use your data to train models.
3. How We Use Your Information
We use your information solely to:
- Provide and improve our AI analytics platform
- Generate dashboards and reports from your data
- Authenticate your identity and secure your account
- Respond to your support requests
- Prevent abuse and ensure fair usage across all users
4. Data Storage & Security
All data is encrypted in transit (TLS 1.3) and at rest (AES-256). We use Supabase for secure authentication and database storage. Uploaded files are processed securely in our ClickHouse analytical database and are not shared with third parties. Dashboard configurations are stored in your browser's localStorage by default — they do not leave your device unless you explicitly save to the cloud.
5. Data Retention
Uploaded file sessions are retained for up to 30 days unless you delete them earlier. Account data is retained for the lifetime of your account. Upon account deletion, all associated data is permanently removed within 30 days. During the Alpha period, we may periodically clear session data as part of maintenance.
6. Third-Party Services
We use the following third-party services, each with their own privacy policies:
- Supabase: Authentication and database hosting (Privacy Policy)
- OpenAI: Default LLM for data analysis — only schema and statistical data, never raw PII (Privacy Policy)
- Google OAuth / GitHub OAuth: Account authentication only
- ClickHouse: Analytical database for processing your uploaded data
7. Your Rights
You have the right to:
- Access, update, or delete your personal data at any time via Settings
- Export all your dashboard configurations via the .sweetheart export format
- Opt-out of marketing communications (we currently send none)
- Request complete account and data deletion by emailing us
- Know exactly what data of yours we hold — just ask
8. Alpha Preview Terms
As this platform is in Alpha, you acknowledge that: (1) features may change without notice; (2) data persistence cannot be fully guaranteed during infrastructure updates; (3) we may collect additional usage telemetry during this phase to improve the product — this telemetry is anonymised and contains no personal data.
9. Contact Us
For privacy-related questions, contact us at: privacy@sweetheart-ai.com