Trust Center
Data Retention Policy
What Chameleon Eye AI stores, where, why, and how long.
Default Behaviour
By default, Chameleon Eye AI does not store raw prompts or AI responses. Only token counts, mode, cost, request status, and timestamps are recorded for billing and performance.
Cloud selected text is only stored if you explicitly save it as a document or draft.
Retention by Data Type
All data categories, storage locations, and user controls.
| Data Type | Stored? | Location | Purpose | Retention | User Control |
|---|---|---|---|---|---|
| Account email | Yes | Supabase | Authentication | Until account deleted | Delete account |
| Billing metadata | Yes | Stripe/Supabase | Subscriptions | As required by payment/legal | Contact support |
| Subscription status | Yes | Supabase | Plan enforcement | Until account deleted | Manage plan |
| Usage counters | Yes | Supabase | Billing, abuse prevention | 12 months rolling | No direct control |
| Cloud consent history | Yes | Supabase | Audit, user reference | Until deleted by user | Delete in settings |
| Local private files | No (local only) | User device | Local analysis | User controls | Delete locally |
| Selected cloud text | Transient | Chameleon Eye API | Cloud analysis | Not stored by default | N/A |
| AI responses | Stored only if saved | Supabase/local | User reference | Until deleted | Delete from archive |
| Saved drafts | Yes | Supabase/local | User reference | Until deleted | Delete in app |
| Website events | Yes | Vercel | Analytics | 30 days | N/A |
| Security audit metadata | Yes | Supabase | Audit integrity | 12 months | Not deletable |
| Support requests | Yes | Supabase | Support | 24 months | Contact support |
| Device activation records | Yes | Supabase | Account security and revocation | Until account deleted or device revoked | Revoke device in settings |
Important Retention Rules
Key rules about data storage and retention.
Local private files remain on the user device in Local Private Mode.
Raw cloud prompts are not stored by default.
Raw AI responses are not stored by default unless the user saves them.
Usage metadata may be retained for billing, abuse prevention, and audit integrity.
Billing metadata may be retained as required by payment/legal obligations.
Trust document requests may be retained for vendor review and audit tracking.
Additional Notes
Clarifications on edge cases and legal requirements.
Billing Records
Billing metadata is retained as required by payment and legal obligations. This may be a legal requirement and cannot always be waived upon account deletion. Users can access their billing history via the billing portal.
Analytics
Website usage events are retained for 30 days via Vercel analytics. No personally identifiable information is attached to analytics records.
Local File Storage
In private local mode, uploaded files and documents never leave your device. Chameleon Eye AI does not copy, upload, or back up local files to Chameleon Eye AI servers. Deletion is entirely under your control.
Audit Log Access
Security audit metadata is retained for 12 months and is visible only to account owners and authorised administrators. These logs support security review and incident response.