Privacy & data policy

Information we process

The website uses Google sign-in through Firebase Authentication. We use account identifiers and available email, name, and profile image information to identify your session and display your account. Saved scenarios and comparison records use Google Cloud Firestore. Simulation inputs are sent to the DebtStack backend to calculate results. Authentication state and onboarding preferences may be stored in your browser.

When you use a ChatGPT or Claude connector, that assistant sends tool inputs to DebtStack and receives scenario information and calculation results. Connector simulations use a deterministic calculation engine. When authenticated connections are available, verified Google identity is used to link or create your DebtStack account. The assistant provider handles your conversations under its own policies.

Documents and optional AI

If you upload a term sheet for extraction, the document is stored in Google Cloud Storage and its content is sent through OpenRouter to the selected model provider. Available extraction routes may include Anthropic and xAI. Review extracted terms before using them. These services are separate from the deterministic simulation engine. The separate website AI chat assistant is currently unavailable.

Analytics and service operation

The website uses PostHog for usage analytics, exception capture, and in-app feedback. Signed-in users are identified to PostHog using their account identifier, email, and name. Feedback events include your message, page path, and email. Email support goes to our contact mailbox. The site loads fonts from Google Fonts and runs on Google Cloud Run. These providers receive information needed to deliver their respective services.

Retention and data requests

Account-owned connector drafts have no automatic expiration and remain retained unless you request deletion. Completed account-owned connector runs, including input snapshots and published results, are retained indefinitely by default. Deleting a saved scenario does not delete retained runs. Anonymous pilot drafts and runs expire 24 hours after creation. Expiration prevents access; physical removal can happen later through the storage cleanup process.

Deleted term-sheet uploads have a seven-day storage recovery window. The project's default logs have 30-day retention; required audit logs have 400-day retention. These periods do not establish a deletion schedule for analytics, support messages, exports, or other retained copies.

Contact rohit@thesharmas.org for access, correction, or deletion requests. We may verify account ownership. Account-wide deletion is not currently available as a self-service feature; request scope, handling, timing, and any retained copies must be confirmed individually. Disconnecting ChatGPT or Claude does not delete data held by DebtStack. We do not promise immediate erasure from backups or all service providers.