Legal
Privacy Policy
Draft — not in force yet
This policy explains what CEO Model collects, why, who can see it, and what you can ask us to do with it. It is written from how the product actually works, not from a template.
1. Who we are
ceomodel.ai ("CEO Model", "we") is operated by legal entity name, registered address, company number company number. For privacy questions write to privacy@ceomodel.ai. Data protection officer or representative, if required.
2. What CEO Model does
CEO Model helps business owners diagnose their business, choose one decision at a time and review the outcome. It asks you questions, stores your answers as evidence, and uses AI models to produce diagnoses, decisions and answers to your questions.
3. What we collect
| Category | Examples | Where it comes from |
|---|---|---|
| Account | email address, display name, language, Arabic reply style, sign-in times | you, our sign-in provider |
| Business information | business name, currency, answers to questions (revenue, costs, customers, team), facts you add, decisions, deadlines, outcomes | you and people you invite |
| Conversations | questions you ask, the answers, facts you choose to add | you, AI models |
| Membership | which businesses you belong to and your role | you |
| Email preferences | weekly email and review reminder on or off, and a record of what was sent, failed or skipped | you, our email provider |
| Usage and cost | which AI calls ran for your business, tokens and cost, errors | the service |
| Security records | admin actions and admin visits to a business | the service |
| Technical | the cookies in section 8, IP address and request logs kept by our hosting providers | your browser |
We do not ask for special-category data such as health or religion. Please do not enter personal information about other people — an employee's private details, for example — unless you have the right to.
4. How we use it, and on what basis
- To provide the service (contract): signing you in, storing your business data, producing diagnoses, decisions and answers, and sending the weekly questions and reminders.
- Security and preventing abuse (legitimate interests, legal obligation): two-step sign-in for administrators, audit logs, rate limits and spending limits.
- Improving the advisors (legitimate interests): authorised trainers may correct an AI answer; the correction and the text it corrects are kept to test and improve the advisors. Decide: allow an opt-out, or anonymise before use.
- Service emails (contract, legitimate interests): the weekly questions and the review reminder. You can turn each off in Settings or with the unsubscribe link in every email. We send no marketing email. If marketing is added later, it needs consent.
- Legal obligations: answering lawful requests and keeping records the law requires.
We do not sell your data, show advertising, or use tracking pixels or third-party analytics.
5. AI processing
Your business information and your questions are sent to AI models to produce the service's output. Requests go through OpenRouter to the model provider (currently Anthropic's Claude models). Confirm and cite each provider's data terms: no training on API data, and how long they keep it. AI output can be wrong: every recommendation shows its evidence, its confidence and what was inferred, and you make the decision.
6. Who can see your data
- You and the members of your business. Owners also see business settings and the member list.
- Our administrators: a small number of named staff who can see account and business information to support you, investigate problems, set limits and keep the service secure. Administrator access needs two-step sign-in, and every administrator action and every visit to a business is recorded.
- Trainers: authorised staff who review and correct AI answers, as described in section 4.
- Service providers who host or run parts of the service for us, under contract:
| Provider | What for | Where |
|---|---|---|
| Supabase | database and sign-in | EU (Frankfurt) |
| Vercel | web hosting | region, e.g. EU (Frankfurt) |
| Trigger.dev | background jobs: AI runs and emails | region |
| OpenRouter and Anthropic | AI models | region |
| Langfuse | AI traces, for quality and debugging | EU |
| Resend | sending service emails | EU |
| Cloudflare | domain name service | global |
Some providers are outside Israel and the EEA. Those transfers rely on adequacy decisions, standard contractual clauses or the providers' data processing agreements.
7. How long we keep it
- Account and business data: while your account or business exists.
- Deleting a business (owners only): its answers, evidence, decisions and conversations go at once.
- Deleting your account: your sign-in, profile, memberships, email records and every business you own alone go at once. Businesses shared with another owner stay.
- AI usage and cost records are kept for accounting, without your identity, after an account is deleted.
- Security records are kept for e.g. 24 months.
- Backups held by our providers expire within e.g. 7 to 30 days.
- Trainer corrections and AI traces: period.
8. Cookies
Only the cookies the service needs. No advertising and no analytics cookies.
| Cookie | What for | How long |
|---|---|---|
| sb-…-auth-token | keeps you signed in | session, up to refresh token lifetime |
| NEXT_LOCALE | your language | 1 year |
| ceo_theme | light, dark or system appearance | 1 year |
| ceo_org | which of your businesses is open | duration |
9. Your rights
Depending on where you live you can ask to see, correct, delete or export your data, object to or restrict some processing, and complain to a supervisory authority — in Israel the Privacy Protection Authority, in the EU your local authority. Much of this is self-service in Settings: edit your profile, change notifications, delete a business, delete your account. For anything else write to privacy@ceomodel.ai; we answer within 30 days.
10. Security
Encryption in transit, access rules enforced in the database row by row, permission checks on the server for every action, two-step sign-in and audit logs for administrators, and limited staff access. No system is perfectly secure; we will tell you and the authorities about a breach as the law requires.
11. Children
The service is for businesses and is not directed to anyone under 18.
12. Changes
We post changes here and, before a material change takes effect, tell account owners by email.