Privacy policy

When you use is-it.ai we collect:

• Account info — the email address you sign up with, the handle you choose, and any optional profile fields you fill in (display name, location, website, avatar).
• Activity — the votes you cast, the comments you post, the categories you browse, and the posts you submit (when submissions open in Phase 3).
• Product analytics — page views, button clicks, and other interaction events processed by PostHog. These events are tied to your account ID once you sign in, and to an anonymous device ID before that. We do not run any third-party advertising trackers.
• Email engagement — delivery, bounce, and unsubscribe signals from our email provider (SendGrid) so we know when our messages stop getting through.
• Server logs — standard request logs (IP, user-agent, timestamp) retained for security and abuse-prevention only, no longer than 30 days.

• We do not run third-party advertising networks.
• We do not sell your data, ever. There is no “data partner” tier of access on our roadmap.
• We do not require your real name or phone number.
• We do not read your camera, microphone, location, or contacts. The site explicitly disables those permissions in its HTTP headers.

Account and activity data is stored in Supabase (Postgres) on US infrastructure with row-level security so your private fields (mobile number, email) are not readable to other users. Caching uses Upstash Redis. Uploaded media (avatars, future post media) is stored on Vercel Blob with content-addressed URLs. The site itself is deployed on Vercel.

We use the minimum cookies needed to keep you signed in and to remember your theme preference. PostHog uses a first-party cookie for its anonymous device ID. We do not set any cookies for advertising, retargeting, or third-party data brokers.

We send transactional email (sign-up confirmation, password reset, security notices) and may send a weekly digest if you opt in. Every marketing email includes a one-click unsubscribe link, and unsubscribing only stops the digest — we will still send security and account-essential mail. Email is delivered through SendGrid; we receive delivery and engagement events from SendGrid via a signed webhook.

You can edit your profile and delete your account at any time. If you delete your account, your votes, comments, and submissions are irreversibly anonymized within 30 days. To request a copy of your data or anything else not covered by the account UI, email support@is-it.ai.

If you are in the EU, UK, or California you have additional rights (GDPR, UK GDPR, CPRA). Reach out to the same address and we will respond within 30 days.

is-it.ai is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has signed up, email us and we will delete the account.

When we update this policy in a way that meaningfully changes how your data is handled, we will email registered users and update the “Last updated” date at the top of this page. Material changes take effect 14 days after notice.

Questions, requests, or concerns: support@is-it.ai. For terms of use, see the Terms page.