Urushi LabsPrivacy Policy
What we collect
Urushi Labs collects only what is necessary to run the facilitation process: your name, contact information (email or phone), and the private messages you send during the intake process.
How we protect your data
All private intake messages and submission summaries are encrypted at rest using AES-256-GCM encryption. Only the server can decrypt them, and they are never returned to the browser of another participant.
What the other participant can see
The other participant in your conversation cannot see your raw intake messages or submission. They can only see the shared report, which is a neutral synthesis generated by the AI. They can see your first name and the discussion topic.
AI processing
Your private submission summary is sent to OpenAI's API solely for the purpose of generating your shared report. It is not used to train OpenAI models and is subject to OpenAI's data processing terms.
Data retention
Case data is retained for 90 days after the case is closed. You may request deletion of your submission at any time before analysis begins.
Third parties
We use Supabase for database hosting, OpenAI for AI processing, and optionally Resend for email notifications and WhatsApp Cloud API for WhatsApp notifications. We do not sell your data to third parties.
Analytics
No third-party analytics are used on private intake, waiting, or report pages. This prototype does not use tracking pixels or behavioural analytics.