Introduction
chamelAIn ("we", "us", "our") provides an AI persona operating system for teams. This Privacy Policy explains what personal data we collect, why we use it, and the choices available to you.
Contact: privacy@chamelain.com
Data we collect
- **Account data:** email address, password hash (managed by our auth provider), display name, and workspace membership.
- **Persona and workspace content:** personas, instructions, overlays, and organization settings you create or activate.
- **Usage and technical data:** IP address, browser type, device information, and product interaction events when analytics is enabled.
- **Support and communications:** messages you send to us and related metadata.
How we use your data
- Provide, secure, and improve the chamelAIn service.
- Authenticate users and enforce organization-scoped access controls.
- Operate MCP integrations you authorize.
- Monitor reliability, diagnose errors, and understand product usage (when analytics is enabled).
- Comply with legal obligations and respond to lawful requests.
Legal bases (EEA/UK)
Where applicable, we rely on: **contract** (providing the service), **legitimate interests** (security, fraud prevention), and **consent** (optional product analytics when required in your region).
Subprocessors
We use trusted providers to run chamelAIn:
- **Supabase** — authentication, database, and row-level security.
- **Vercel** — web application hosting and delivery.
- **Render** — MCP server hosting.
- **PostHog** — product analytics and error monitoring (when enabled in production).
A current subprocessor list is maintained in this policy; material changes will be reflected here.
Product analytics and error reporting
When PostHog is enabled (production by default when configured), we collect page views, feature usage, and client-side error events to improve reliability and understand how the product is used. Identifiers may be linked to your account after sign-in.
**Your choices:**
- **In-app cookie notice** on first visit — Accept, Reject non-essential, or Manage preferences (see Cookie Policy).
- **Settings → Preferences** — toggle **Product analytics** on or off at any time.
In EEA, UK, and Switzerland, browser analytics does not run until you accept. In the United States and other regions, analytics may run by default until you opt out.
**MCP server telemetry:** PostHog events from the hosted MCP server (operational reliability and usage) are not controlled by the in-app browser toggle; they are disclosed here for transparency. Contact privacy@chamelain.com with questions.
Retention
We retain account and workspace data while your account is active and for a limited period afterward as needed for backups, legal compliance, and dispute resolution. You may request deletion as described below.
Your rights
Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing.
- **In-app:** Sign in and open Settings → Security to **export your data** (JSON download) or **permanently delete your account**. Deletion requires confirmation and password re-entry for email accounts; sole workspace owners are warned when deletion removes the workspace and revokes access for other members.
- **Analytics:** Settings → Preferences or the cookie notice described in our Cookie Policy.
- **Contact:** privacy@chamelain.com for privacy requests we cannot fulfill in-app.
We will verify your identity before fulfilling requests.
International transfers
We and our subprocessors may process data in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers.
Children
chamelAIn is not directed at children under 16. We do not knowingly collect data from children.
Changes
We may update this policy. The "Last updated" date at the top will change when we do. Material changes may be communicated in-product or by email where appropriate.