Privacy Notice · Causerie

This notice explains how Flock Capital, LLC, a Delaware limited liability company with its principal place of business in Seattle, Washington, USA (the controller), handles personal data in Causerie. Your Flock ID account (sign-in, profile, payments) is covered by Flock ID's own privacy policy.

What we collect and why

Data	Where from	Why (and legal basis under the GDPR/UK GDPR)
Flock ID identifier, username, display name, avatar URL, plan entitlements, subscription status	Flock ID, when you sign in and when it notifies us	To identify you and know what you've paid for (contract)
Your messages, your regulars' replies and settings, memory notes, tasks, schedules, published notes	You and your regulars	To provide Causerie (contract)
Memory: what your regulars and Colette remember about you and your world (people, places, organizations, projects, preferences, events and facts), how they relate, and where each came from (which regular wrote it, in which salon and after which of your messages, when, and whether you said it, a regular inferred it or it came from a web page, with that page's address). Some items are visible to every regular, some to one.	You and your regulars	To personalise replies (contract). Relevant parts are sent to the model provider with each turn, as part of the instructions
Tool activity: searches run, pages read, approvals and denials (the ledger)	Your regulars	To show you what happened and to keep the service accountable (contract, legitimate interests)
Usage and cost per model call (tokens, cost, model), rate-limit counters	The service	To meter your allowance, enforce limits and prevent abuse (contract, legitimate interests)
Session cookie, time zone, brief settings	Your browser and settings	To keep you signed in and run your schedules (contract)
Server logs (IP address, user agent, errors)	Our hosting provider	Security and debugging, kept briefly (legitimate interests)
Reports about published notes (and contact details if you give them)	Reporters	To handle notices about content (legal obligation, legitimate interests)

We do not sell personal data, we do not use it for advertising, and we do not use your content to train AI models. We don't intend to collect sensitive (special-category) data; please don't put it into Causerie unless you are comfortable with it being processed as described here.

Who processes it for us

Service	What for	Where
OpenRouter	Routes each request to an AI model provider and reports its cost	USA
AI model providers via OpenRouter: Anthropic (incl. via AWS, Google Cloud, Azure), OpenAI, Google, and for open-weight models the hosting company OpenRouter selects (e.g. DeepInfra, Fireworks, Baidu Cloud, StreamLake, GMI Cloud)	Generate replies, run web search	USA and other countries
Vercel	Hosting, serverless functions, logs	USA (Washington, D.C. region)
Neon	Database	USA (us-east-1)
Flock ID (Flock Capital)	Sign-in, subscription status	USA
Stripe / Link	Payment processing as reseller (merchant of record) and tax; Causerie never sees card details	USA
Cloudflare	DNS	Global

AI requests: what goes to a model provider is your regular's instructions, its memory notes, recent conversation history and tool results. We send every request with OpenRouter's data-collection "deny" setting, which restricts routing to providers that do not store prompts for training. Providers may keep requests briefly for abuse monitoring under their own terms. We also send OpenRouter a one-way hash of your account identifier so it can detect abuse, never your name or email.

Some of these providers are outside your country. Where the GDPR or UK GDPR applies, transfers rely on the providers' Standard Contractual Clauses or the EU–US Data Privacy Framework, as applicable.

How long we keep it

Your content stays until you delete it (archived salons and retired regulars are kept until you delete your data).
Memory: until you delete it, or your Causerie data or Flock ID is deleted. Forgotten items are kept, marked as forgotten, until you delete them.
Usage and cost records are kept while your account exists; when you delete your data we keep only anonymised totals.
Rate-limit counters expire within days; server logs within 30 days.
Reports about notes are kept for up to 2 years to handle repeat abuse and legal requests.
When Flock ID tells us your account was deleted, we delete your Causerie data immediately.

Your rights

Depending on where you live (for example under the GDPR, UK GDPR or US state laws such as California's), you can ask to access, correct, delete or port your data, object to or restrict processing, and withdraw consent. In Causerie you can:

Download your data as JSON: Settings → Your data.
Delete all your Causerie data: Settings → Your data. This does not delete your Flock ID or cancel your subscription (do that in Flock ID). We keep only what enforces limits: your plan status, this month's usage total and whether you've used the free trial.
See, edit, merge and delete everything in memory on the Memory page (it's included in your export).

For anything else, write to . We answer within one month. You can also complain to your data protection authority.

Cookies

Causerie sets only cookies that are strictly necessary: a session cookie to keep you signed in and a short-lived cookie during sign-in. No analytics or advertising cookies, so there is no cookie banner.

Children

Causerie is for adults (18+). We don't knowingly process children's data; if you believe a child is using Causerie, tell us and we'll delete their data.

Changes and contact

We'll announce material changes in the app before they take effect. Questions or requests: · Flock Capital, LLC, Seattle, Washington, USA.

Version 2026-11-07.4, effective 7 November 2026.