This Privacy Policy describes how PrincelyAI ("PrincelyAI," "we," "us") handles information when you use the PrincelyAI service available at princely-ai.com (the "Service"). PrincelyAI is a brand of an independent operator based in California. For legal or official inquiries that require the operator's full legal identity, email legal@princely-ai.com.
We've written this policy to match what the Service actually does — no boilerplate that doesn't apply. If you have questions, email privacy@princely-ai.com.
Account information:
Operational information:
What you submit to be analyzed:
This is the part most users care about, so we want to be clear:
When you submit a deal for analysis:
1. Your input travels from your browser to our backend over an encrypted (TLS) connection.
2. Our backend forwards the request to Anthropic's commercial API — the third-party AI model that powers PrincelyAI — for processing.
3. Anthropic returns the result. The result is passed back through our backend to your browser.
4. Our backend does not persist the input or the output. Nothing about the content remains on PrincelyAI infrastructure after the request completes.
About Anthropic's role: Anthropic's commercial API has its own data-handling policy that applies during the brief period it processes your request. As of the date of this policy, Anthropic does not use customer API inputs or outputs to train its models, and automatically deletes API logs after 7 days. Anthropic's policy is published at https://platform.claude.com/docs/en/manage-claude/api-and-data-retention. We recommend reviewing it directly if data handling is important to your use case.
To prevent abuse and keep the Service available, we use IP-based rate limiting. When a request reaches our backend, your IP address is briefly held in an edge cache (typically less than 60 seconds) for the purpose of counting requests within a rolling window. After the window expires, the entry is automatically discarded.
Your IP address may also appear in operational logs (e.g., when a request is rejected for exceeding the rate limit or for coming from an unrecognized origin). These operational logs are stored by our infrastructure provider (Cloudflare) under their default retention policy. We do not associate IP addresses with your account or use them for any purpose other than abuse prevention.
PrincelyAI relies on the following infrastructure providers. Each has its own privacy practices and is responsible for compliance with applicable laws on its own platform.
We do not share your data with any other parties.
PrincelyAI uses only the browser storage and cookies necessary to keep you signed in (a session token from our authentication provider) and to remember your interface preferences. We do not use third-party advertising trackers, retargeting pixels, or marketing analytics.
If you are located in the European Union, the United Kingdom, or California, you may have additional rights under local law (such as the right to object to processing, the right to data portability, or the right to opt out of any "sale" or "sharing" of personal information). PrincelyAI does not sell or share personal information for cross-context behavioral advertising. To exercise any local right, email privacy@princely-ai.com.
We understand that users frequently consider the Service in the context of confidentiality obligations (NDAs, LPAs, or similar agreements). The technical posture above — no persistence of deal content on our infrastructure, no AI model training on customer data, short upstream retention — is designed to be compatible with most ordinary commercial NDAs covering early-stage deal screening.
That said:
We use TLS encryption for all traffic between your browser, our backend, and our third-party providers. Authentication is handled by Supabase, which hashes and salts passwords; we do not see passwords in plaintext. Service-role keys and API credentials are stored as encrypted environment variables on our infrastructure provider and are not exposed to client-side code.
No online service can guarantee absolute security. If you become aware of a security issue with the Service, please email security@princely-ai.com.
The Service is not intended for users under the age of 18. We do not knowingly collect information from children under 18. If you believe a child has provided information to us, please email privacy@princely-ai.com and we will delete it.
We may update this policy as the Service evolves. When we do, we'll update the "Last updated" date at the top and, for material changes, post a notice on the Service. If we ever begin storing analysis content, using customer data for any purpose beyond what's described here, or sharing data with new third parties, we will notify users before that change takes effect.
Email: privacy@princely-ai.com
Service: PrincelyAI (princely-ai.com)