Account data (name, email, hashed password), organization and project data (designs, uploaded plan images), session data, and audit logs. [Counsel to confirm completeness and lawful basis.]
Floor plans and site imagery uploaded by users may depict sensitive facilities. They are stored within the user's project, visible only to that organization's members, and are never used for any other purpose. [Counsel to define: retention, deletion on account closure.]
Conversations with the AI Surveillance Consultant may be processed by a third-party AI provider (Anthropic) to generate responses. [Counsel to define: disclosure requirements, data processing terms.]
A single session cookie (acds_session) is used for authentication. No third-party advertising or tracking cookies are used. [Counsel to confirm.]
[Counsel to define: access, correction, deletion, portability; applicable jurisdictions.]