Your data and privacy

Executive Council is a product of DigitalwithVineeth, a sole proprietorship run by Vineeth Nair. It is a bring-your-own-key tool, so the data picture is simpler than most. Here is exactly what we keep, who else touches it, and what we never do with it. No fine print.

Two terms are used precisely below. The app means Executive Council itself, where deliberations run, whether you are signed in or using the no-signup demo. This website means the pages you are reading right now. They are separate addresses, so it matters which one is meant.

What we store

• Your account. Your email address and your login, so you can sign in and come back to your work.
• Your deliberations. The questions you ask, your project-context notes, and the council's answers. We save these so you can reopen a past session, and they stay tied to your account only.
• Your model access key. Encrypted on our server the moment you save it, so it follows you across devices. A copy also sits in your browser on the device where you typed it.
• A demo session, if you use the no-signup demo. The same record as above, your questions and the council's answers, saved under our own demo account rather than yours, because at that point you do not have one. If you sign up afterwards, it moves across to you.

How the key is handled

Your model access key is stored encrypted at rest with a secret that lives only on the server. Once you save it, the server never sends it back to your browser. That is why the only copy in a browser is the one on the device where you typed it: no other device can ever be sent it. The app only ever learns whether a key is present, not what it is, so there is no screen anywhere that can show it back to you.

The key is only ever sent to OpenRouter, to run your deliberations. You can remove it at any time from inside the app, in one click, and the encrypted copy is deleted from our server when you do. The copy in your browser is local to that device, so clearing the app's stored site data in that browser clears that one.

The no-signup demo

The demo runs on a separate wallet that we fund ourselves. It never touches your key, and you do not need an account or a key to use it. If you later create an account, the demo session you already ran can be carried over and becomes your first saved session.

Who else is involved

Here are the services and categories of service that touch your data, and what each one does. We set them out because a privacy policy that hides its processors is not much of a privacy policy.

• Supabase is our authentication and database provider. Your account and your saved deliberations live there.
• Managed cloud hosting runs the app and this website.
• OpenRouter runs the AI models and charges your key, never ours.
• The model providers (OpenAI, Anthropic, Google, DeepSeek and others) read your question through OpenRouter so they can answer it.
• Cloudflare Turnstile runs a quick bot check when you sign in or start a demo.
• Web3Forms passes along anything you send through the contact form inside Executive Council.
• A transactional email provider handles the contact form on this website. If you write to us there, including to ask for deletion, it keeps your details and passes your message on to us.
• Google Analytics counts page visits on this website, so we can see which pages get read. It does not see your deliberations, your account, or your key.

What we never do

• We never sell your data.
• We never train our own models on it.
• We never share your model access key with anyone but OpenRouter.

About the AI providers

Your questions and your context go to OpenRouter and to the model providers for one reason: to answer you. Whether they keep that input, or train on it, is set by their own policies and not by ours. We cannot control it and we will not pretend otherwise.

If that matters to you, you can tighten it yourself in your OpenRouter account's data settings. Whatever you set there applies to every deliberation you run on your own key. The no-signup demo is the one exception: it runs on our own account, so our settings apply to that one, not yours.

How long we keep it

There is no automatic expiry today. Your account, your saved deliberations, and your stored key stay until you remove them or ask us to delete the account. When an account is deleted, the data tied to it goes with it.

A demo session you never claim has no expiry either. It stays under our own demo account. Because the demo asks you for no account and no email, there is nothing for us to match a deletion request against.

Your control, and how to delete your data

• Remove your stored model access key any time from inside the app.
• To delete your account or wipe your data, ask us. Deletion is handled by hand right now, so there is no self-service delete button yet. Write to us through the contact page, or email support@digitalwithvineeth.com from the address on your account, and we will remove it.

A note on the AI

Everything Executive Council hands you is created by AI. Five seats argue, a Chairman writes the recommendation, and an independent auditor checks it, but it is still machine reasoning working from what you gave it. Read it with your own judgement, and make the call yourself.

Changes to this policy

If this policy changes, we will update the date at the top of this page and the version block below. Executive Council records which version you agreed to when you created your account.

Version v2, effective 26 July 2026. This document replaced the earlier in-app version (v1) when Executive Council moved to its own address. Accounts created before this date recorded consent against v1.

Contact

For any privacy question or a deletion request, contact support@digitalwithvineeth.com. See our Contact page for full details.