This Privacy Policy describes how Khosouf Studio ("we", "us", "our") collects, uses, stores, and protects your information when you use the Khosouf War Room platform ("Service"). We are committed to protecting your privacy and handling your data transparently.
When you create an account, we collect:
When you use the Service, we process and may store:
When you interact with the AI agents, we process:
Important: Your questions and conversations are sent to third-party AI providers (Anthropic) for processing. We store consultation data (questions, agent results, and chat history) on our servers to enable follow-up conversations and session continuity.
⚠️ Do not share confidential, proprietary, or sensitive information through the Service. As the platform operator, we have technical access to stored consultation data. While we do not actively monitor or share your data, you should treat all inputs as potentially visible to platform administrators.
Ghost Mode: You can enable Ghost Mode before asking a question to prevent storage of consultation data and memory profile updates. Ghost Mode sessions are processed but not saved to our database.
We may automatically collect:
| Purpose | Legal Basis |
|---|---|
| Provide and operate the Service | Contract performance |
| Authenticate your identity | Contract performance |
| Process token purchases and track balance | Contract performance |
| Process your queries through AI agents | Contract performance |
| Store your pre-context slots and settings | Contract performance |
| Send transactional emails (password reset, confirmations) | Contract performance |
| Prevent fraud and abuse | Legitimate interest |
| Improve and develop the Service | Legitimate interest |
| Comply with legal obligations | Legal obligation |
We do not use your data to train AI models. We do not sell your personal information to third parties.
AI Model Provider: We use Anthropic's Claude API to power the AI agents in our Service. When you submit a question or interact with the Chief of Strategy, your input is sent to Anthropic's servers for processing.
According to Anthropic's privacy policy and terms of service:
⚠️ Important: By using our Service, you acknowledge that your inputs will be processed by Anthropic's AI systems. You should:
If you want to prevent storage of your consultation data on our servers (while still being processed by Anthropic), enable Ghost Mode before submitting your question. Ghost Mode prevents us from saving your consultation history and memory profile, but your query will still be sent to Anthropic for processing.
In addition to Anthropic, we share data with the following third-party services:
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase | Authentication, database | Account info, token balance, settings, pre-context slots, consultation history |
| OAuth authentication | Email, name (only if you use Google sign-in) | |
| Stripe | Payment processing | Payment information, billing details (handled directly by Stripe, not stored on our servers) |
| Vercel | Hosting and CDN | Standard web server logs (IP address, user agent, request URLs) |
Each provider operates under their own privacy policy. We encourage you to review:
Your account data is stored in Supabase's infrastructure (hosted on AWS). We implement the following security measures:
While we take reasonable measures to protect your data, no system is 100% secure. You are responsible for maintaining the security of your account credentials.
Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, financial records).
The Service uses:
We do not use advertising cookies or third-party tracking cookies.
Depending on your jurisdiction, you may have the following rights:
To exercise any of these rights, contact us at privacy@khosouf.ai. We will respond within 30 days.
Your data may be processed in countries other than your own, including the United States (where our infrastructure providers operate). By using the Service, you consent to the transfer of your data to these jurisdictions. We ensure that appropriate safeguards are in place for international transfers.
The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
We may update this Privacy Policy from time to time. We will notify you of material changes by:
Your continued use of the Service after changes constitutes acceptance of the updated policy.
For privacy-related questions, concerns, or to exercise your rights: