Trust & Privacy

Tribunal accounts are protected by email + password and Google sign-in. Each user can only read and modify their own sessions, responses, context artifacts, API keys, and profile. Database row-level security enforces this on every request, not just in the UI.

Administrative actions (suspending users, password resets, role assignment) are restricted to designated admin accounts and recorded in an internal audit log. Users cannot grant themselves admin rights.

• Your email and display name.
• Your prompts and the responses returned by Claude, ChatGPT, and Gemini for each session you run.
• Context artifacts you upload to seed a model (only the providers you choose to load them into).
• Your provider API keys, stored encrypted at rest. We never display full keys back to you after entry — only the last four characters.

When you run a deliberation, your prompt and any attached context are sent to the model providers you have enabled — Anthropic (Claude), OpenAI (ChatGPT), and Google (Gemini) — using your own API keys. Their handling of that data is governed by their own terms and privacy policies. Tribunal does not train models on your data.

Tribunal runs on the Lovable Cloud platform. Data is stored in a managed PostgreSQL database with encryption at rest and in transit. Authentication, secrets, and server functions run on managed infrastructure provided by Lovable. We rely on these platform capabilities; they are not a certification of Tribunal itself.

Sessions, responses, and context artifacts are retained for 90 days from last activity, after which they are eligible for deletion. You can delete your account, sessions, or API keys at any time from the workspace settings; deletions take effect immediately for your view and are removed from backups within the normal backup-rotation window.

To request a copy of your data, deletion of your account, or correction of stored information, email jerry@freelunch.org. We aim to respond within 30 days.

If you believe you've found a security issue, please report it privately to jerry@freelunch.org before any public disclosure. We appreciate responsible reports and will acknowledge receipt.

Tribunal is responsible for the application code, access controls, and data handling described above. Lovable Cloud is responsible for the underlying platform (hosting, database, auth infrastructure). You are responsible for keeping your account credentials and provider API keys safe, and for the content you submit through the workspace.