Privacy Policy

When you sign in with Google or GitHub, we receive your email address, full name, and avatar URL from that provider. We do not receive or store your password for either provider.

When you use the simulator, we store the architecture scenario assigned to you, the diagram you build (component types and connections — not screenshots or personal content), which phase of the session you're in, and the final score once a session completes.

We also collect product usage analytics: which pages you visit, which features you use (e.g. starting a scenario, triggering Chaos Roulette, completing a session), and coarse session-progress events. This is tied to your account once you're signed in, so we can understand how the product is actually used and where people get stuck — not to build an advertising profile. These events are automatically deleted after 180 days.

• To authenticate you and keep your sessions associated with your account.
• To send your submitted architecture and chat messages to Google's Gemini API for evaluation and to generate scenarios — see Third parties below.
• To compute your aggregate career score across past sessions.
• To understand product usage and improve the experience — see Third parties below.

We do not sell your data, and we do not use it to train our own models.

We use Supabase for authentication, data storage, and product usage analytics (page views and feature-usage events, not the content of your architecture or chat messages — this data does not leave our own database), and Google's Gemini API to generate scenarios and evaluate your submissions. Content you submit to the AI panel — including your serialized architecture diagram and chat messages — is sent to Google for processing under their API terms.

If you subscribe to Pro, payment is processed by Razorpay, which receives what's needed to complete the charge (name, email, and payment details) directly — we never see or store your card or UPI details ourselves. We also use Vercel Web Analytics for aggregate, privacy-respecting traffic metrics (page views and referrers) — it does not use cookies and does not tie activity back to your individual account.

You can permanently delete your own account at any time from your Profile page — this immediately removes your profile, architecture sessions, and career score. Billing records (plan, amount, dates) are retained afterward with the personal link removed, since Indian tax law generally requires payment records to be kept for several years regardless of account deletion. Separately, an architecture session you start but never finish is automatically deleted after 90 days of inactivity — a completed, scored session is never affected by this and is only ever removed by the account deletion above. The same Profile page also lets you export a copy of your data at any time. For anything this self-service flow doesn't cover, email support@chaosbench.com.

If you are located in India, the Digital Personal Data Protection Act, 2023 gives you the right to access, correct, and erase your personal data, and to withdraw consent at any time. Export and erasure are self-service from your Profile page; correction is via the same page's account details form. For anything not covered by the self-service tools, or to raise a grievance about how your personal data is handled, contact our designated Grievance Officer at support@chaosbench.com. We aim to acknowledge grievances within 7 days and resolve them within 30 days.

Questions about this policy or your data can be sent to support@chaosbench.com.