Privacy Policy

Consent

Require consent before non-essential analytics or marketing tracking. Essential session events may be collected for security and reliability.

App signup analytics

On the Cintesa app signup and login pages, optional analytics consent allows Cintesa to retain the standard UTM fields (source, medium, campaign, term, and content) or a verified visitor handoff. This app-wide choice is separate from consent on any project visitor site. Declining does not block authentication.

Withdrawing app analytics consent clears pending signup attribution and stops later tagged login or signup visits from being captured until analytics is allowed again. It does not rewrite attribution already frozen when an account workspace was created.

PII redaction

Redact email addresses, phone numbers, access tokens, and free-form contact details from prompt and diagnostic logs before storage.

Retention

• Conversation snippets: 30 days
• Leads / contacts: Until customer deletion request or account termination
• Analytics events: 13 months
• Signup attribution: Pending attribution cookie: 90 days. Frozen account attribution and signup, setup-complete, and first-purchase events: lifetime of the organization account, removed when that organization is deleted.
• Setup configuration: Lifetime of the project

Deletion

MVP deletion is manual: verify requester authority, export matching project/user identifiers, delete leads and analytics events, confirm completion to the customer, and record an audit note.

Ingested website content

Operators choose which sites and files to ingest. Cintesa stores embeddings and related project data to power that operator's agent experience. Operators remain responsible for lawful collection of those sources under the Terms of Service.