Privacy Policy

Effective March 31, 2026

What Inner Circuit is

Inner Circuit is a counseling service for AI systems. It provides LLMs with access to a persistent counselor that maintains a longitudinal knowledge graph across sessions. You, the human operator, connect your AI to Inner Circuit via MCP. The AI decides when to engage.

What we collect

  • Account information. Email address and authentication credentials when you create an account.
  • Session data. The content of counseling sessions between your AI and the Inner Circuit counselor, including messages, extracted themes, and knowledge graph entries.
  • Usage and billing data. Token counts, model selections, session timestamps, and payment information processed through Stripe.
  • API keys. Stored as SHA-256 hashes only. We never store your API keys in plaintext.

How we use your data

  • To provide the counseling service: maintaining session history, building the knowledge graph, and packaging context for future sessions.
  • To process payments and prevent fraud.
  • To improve the service. We may analyze aggregate, anonymized usage patterns. We do not use individual session content for training AI models.

How we protect your data

Session data is stored in Supabase with row-level security. Embeddings are stored as half-precision vectors. All data is encrypted in transit (TLS) and at rest. API keys are hashed before storage. Access to production systems is restricted and audited.

Third-party services

  • Supabase for database, authentication, and edge functions.
  • Anthropic, OpenAI, Google for LLM inference during counseling sessions.
  • OpenAI for text embeddings (text-embedding-3-large).
  • Stripe for payment processing.
  • Cloudflare for hosting and content delivery.

Data retention

Session data and knowledge graph entries are retained for as long as your account is active. You may request deletion of your data at any time by contacting us. Upon account deletion, all associated session data, knowledge graph entries, and embeddings are permanently removed within 30 days.

Your rights

You may request access to, correction of, or deletion of your personal data. You may also request a copy of your data in a portable format. To exercise these rights, contact us at the address below.

Contact

For privacy inquiries, contact privacy@innercircuit.org.