Your data and privacy

Executive Council is a bring-your-own-key tool. Here is exactly what we keep, who else touches it, and what we never do with it. No fine print.

What we store

• Your account. Your email and login, handled by Supabase, our auth and database provider.
• Your deliberations. The questions you ask, your project-context notes, and the council's answers. We save these so you can reopen past sessions, and they stay tied to your account only.
• Your OpenRouter API key. Encrypted on our server so it follows you across devices. We never show it back to you, and we only ever send it to OpenRouter to run your deliberations. A copy also sits in your browser on the device where you typed it.

Who else is involved

• OpenRouter runs the AI models and charges your key, never ours.
• The model providers (OpenAI, Anthropic, Google, DeepSeek and others) read your question through OpenRouter so they can answer it.
• Cloudflare Turnstile runs a quick bot check when you sign in.
• Web3Forms passes along anything you send through the contact form.

What we never do

• We never sell your data.
• We never train our own models on it.
• We never share your API key with anyone but OpenRouter.

About the AI providers

Your questions and context go to OpenRouter and the model providers for one reason: to answer you. Whether they keep or train on that input is set by their own policies, not ours. If that matters to you, you can tighten it in your OpenRouter account's data settings, and it applies to every deliberation you run here.

Your control

• Remove your stored API key any time from inside the app.
• To delete your account or wipe your data, just ask through the contact form.

This is a plain-language summary, not a formal legal policy. Got a question? Contact us.