Privacy Policy

Account information. When you create an account, we collect your name, email address, and account type. If you log in with Google, we receive your name, email address, and profile picture from Google. If you use Sign in with Apple, we receive your Apple account identifier and the name or email address Apple makes available, which may be a private-relay address. We use this information to create and maintain your account.

Catalogue data. Works, provenance records, exhibition history, bibliography, images, and other data you add to your catalogue. This is your data — you own it.

Usage data. We collect standard analytics: pages visited, features used, browser type, and IP address. We use this to improve the product.

Studio Line data. If you opt in to Studio Line, we collect the mobile number you connect, your consent record, message and delivery metadata, the text, photographs, and audio recordings you send, and your review decisions. Phone numbers are encrypted or hashed where the service does not need to display or deliver to them.

Raisonnai Connect. You may connect an AI service you already use, such as ChatGPT, Claude, Gemini, or Copilot, through Raisonnai Connect and the Model Context Protocol (MCP). Raisonnai does not operate that AI. Your use of it is governed by your agreement with its provider.

When your AI calls a Raisonnai Connect tool, we receive the tool name, the arguments sent with that call, and the account authorization attached to it. We process those arguments to perform the request and return the catalogue data or result the tool requires. Your AI provider may receive and retain that response under its own terms and privacy policy. Raisonnai does not receive the rest of your conversation unless the AI provider includes that content in a tool argument.

Binary file contents do not pass through Raisonnai Connect MCP tool messages. If you attach a file to your AI, the provider may read it in that service; Raisonnai Connect receives only the structured values or upload references the provider sends to a tool.

For security and reliability, we record limited tool telemetry such as the tool name, connected client, account, success or failure, and request duration. Product analytics do not include full tool arguments or conversation text. Standard infrastructure and error logs may contain information needed to diagnose a failed request.

OAuth authorizations record the connected client, approved permissions, resource, and connection dates. Public connector access and refresh tokens are stored only as cryptographic hashes. Internal account credentials remain access-controlled and are not returned to the AI provider. You can revoke each connection in Raisonnai Settings; public ChatGPT connector revocation takes effect on its next request.

Managed Discovery Run. When you start a Discovery Run, Raisonnai sends the identity facts already in your artist profile and bounded public-web search context through OpenRouter to find possible works. OpenRouter may route the request to the model provider named for the Run, and its web-search service may use Exa. Managed requests require zero-data-retention model routing, disable provider data collection, disable input and output logging, and do not allow model fallback. OpenRouter retains bounded request metadata such as token counts and latency, but not the managed prompt or response content. Raisonnai enables Discovery only under search-provider terms that prohibit using artist-identifying query data to train or improve generalized models. Zero-data-retention routing does not guarantee processing in a particular country; provider processing may occur outside your region under the transfer terms in our provider agreements. Raisonnai's Discovery analytics and structured error events retain bounded operational data such as Run IDs, provider and model names, token and cost counters, timing, status, and error class. They exclude prompts, source excerpts, private catalogue data, and contact details. Raisonnai stores the cited public sources and proposed work details so you can review them. Nothing enters your catalogue until you approve it on an authenticated Raisonnai page, and Discovery never signs a work. Limited structured Discovery error diagnostics sent to Sentry are retained for no more than 90 days.

Studio Line. Studio Line is paused. Raisonnai does not currently invite or process artist messages through that pilot. Its retained data remains subject to the deletion and access controls described in this policy.

Your catalogue data is retained while your account is active. When you request account deletion, we disable and hide the account immediately and complete verified deletion of Raisonnai-hosted account, catalogue, upload, login, and public record data within 24 hours. Hosted RAI links then show only a non-identifying withdrawn state. We do not retain a separate legal-evidence copy of your hosted data in this release.

Temporary deletion-job data is kept only long enough to revoke provider access, verify Storage deletion after existing upload authorizations expire, and send the completion notice. Copies previously downloaded or retained independently by a recipient or service provider are outside Raisonnai's hosted deletion process.

Discovery candidates remain available while you review them. Choosing Remove immediately clears that candidate's proposed details and citations, while retaining only its bounded decision state for audit and aggregate measurement. A completed or cancelled Run keeps its identity snapshot, cited source excerpts, and proposal evidence for no more than 30 days. A Run left ready for review expires after 90 days and its identity and evidence are cleared. Bounded operational and cost metadata, including Discovery product events, is deleted after 365 days. Structured Sentry error diagnostics are deleted within 90 days. Account deletion may clear identifying Run data sooner.

Raw Studio Line message bodies and unapproved attachments are retained for no more than 30 days and may be deleted sooner. If you approve a catalogue change, we retain only the cited evidence needed to support that record.