Privacy · MVP policy
Your curiosity is yours.
A plain-English description of the data the MVP uses. Last updated October 9, 2026. This policy is an MVP template and requires legal review before significant production scale.
Information we collect
We store your email address for login and, only if you explicitly opt in, the weekly digest. We store assessment answers separately from calculated topic scores. If you connect X, we import the IDs, names, and public descriptions of accounts you follow. If you connect YouTube, we import the IDs, titles, and public descriptions of subscribed channels. We store derived topic estimates, digests, preference feedback, basic delivery events, and Stripe customer and subscription identifiers and status. Payment card data stays with Stripe.
Anonymous AI and developer access
The public JSON API and MCP server calculate a topic estimate from answers that an agent submits. These requests do not create an account or save answers in the OffFeed database. We do not expose private profiles, connections, or digests through those endpoints. Hosting and security systems may retain standard request metadata in operational logs.
How we use it
Your assessment and optional subscriptions/follows estimate the subjects in your information diet. They inform five weekly recommendations drawn from a shared pool of sourced material. They do not infer political ideology, religion, health status, or other sensitive identity attributes. OffFeed does not sell personal data.
Connections and access
Connections are optional and read-only. OffFeed does not read direct messages, post for you, follow anyone, or change YouTube subscriptions. OAuth tokens are encrypted on the server and not exposed to the browser. Public account and channel classifications may be cached to avoid repeating work, while your connection list is private.
Service providers
Supabase hosts authentication and database records. OpenAI helps classify descriptions and synthesize sourced material. Exa helps discover candidate sources. Stripe processes paid subscriptions and billing details. Resend sends opted-in emails and returns delivery events. Vercel hosts the application and scheduled jobs when deployed there. Their own terms and privacy practices also apply.
Your choices
You can take the assessment without connecting external accounts, disconnect either provider and delete its imported relationship data, turn off report emails, manage or cancel a paid plan through Stripe, or delete your account and associated personal records from the dashboard. Aggregate topic estimates are recalculated after disconnection. A copy of a public account or channel classification may remain in the shared cache without its link to your account.
Retention and limits
Your account data persists until you delete it, subject to service backups and operational logs. Weekly story metadata and source links may be retained for product operation. This MVP does not provide an automatic data export or a precise backup deletion deadline; these require a published retention policy before broad launch.
Contact
For privacy requests, use the account deletion controls or contact the product owner at the address published with the production domain. No contact address has been configured in this prototype.