Privacy policy

Searchspace (“we”, “us”) is a tool for exploring a topic as an interactive space of points and links. This policy explains what we collect when you use it, why, who else sees it, and the choices you have. It applies to the website and every feature reachable from it.

What we collect

Account details. If you sign in, we store your email address, and if you sign in with Google, the name and profile picture Google shares with us. We never see your password: email sign-in and Google sign-in are both handled by Supabase, our authentication provider.

Your spaces. When you are signed in, the spaces you build are saved to your account so you can return to them: every point and link, their descriptions, the chat conversations you have about them, saved versions, display settings, and the text of any file you upload.

Prompts and uploads. What you type into the search box or a chat, and the text extracted from files you upload, is sent to the AI models that generate and edit your space (see “Who else sees your data”).

A device identifier. Whether or not you sign in, we set a random identifier in a cookie (ss-device) to apply usage limits per device. It does not identify you personally and is not linked to any account.

Technical data. Our servers and providers record the usual request data: IP address, browser type, pages viewed, and timing. We also collect anonymous page-view statistics through Vercel Analytics, which does not use cookies and does not track you across sites.

Preferences stored in your browser. Theme, keyboard shortcuts, read-aloud voice and speed, and similar settings are kept in your browser’s local storage. They never leave your device.

We do not collect payment information. We do not sell personal information and do not run advertising.

How we use it

• To run the service: generate and save your spaces, keep you signed in, and let you share a space by link.
• To keep it working fairly: rate limits and daily usage caps per account and per device.
• To understand usage in aggregate (how many people visit, which pages) and to fix problems.
• To respond when you contact us.

We do not use your content to train AI models, and our providers are contractually barred from doing so with data sent through their paid APIs.

Who else sees your data

We rely on a small number of providers, each of which receives only what it needs to do its job:

• OpenRouter routes your prompts, the current contents of your space, and any uploaded text to the AI model that writes and edits the space. The model itself is hosted by the model’s vendor (for example OpenAI). Your account details are not sent.
• Exa performs web searches and fetches pages when the AI decides research is needed. It receives the search queries and page addresses, not your identity.
• Supabase hosts our database and handles sign-in. Your account and saved spaces live there.
• Upstash stores short-lived counters for rate limiting and a cache of fetched web pages, keyed by the device identifier or account id.
• Vercel hosts the site and provides the anonymous analytics described above.
• Google, if you choose to sign in with Google.

We may also disclose information if the law requires it, or to protect the rights and safety of users or the service.

Shared spaces

If you turn on link sharing for a space, anyone who has the link can view that space, including its points, links, descriptions, and the chat history saved with it. Your email address is not shown. You can turn sharing off at any time, which disables the link.

How long we keep it

Your account and saved spaces are kept until you delete them or ask us to delete your account. Rate-limit counters expire within a day; cached web pages within a week. Server logs are kept for a limited period by our hosting providers. If you use Searchspace without signing in, nothing you build is saved to our servers.

Your choices and rights

• You can delete any space from My Spaces at any time.
• You can ask us to export or delete everything associated with your account by emailing support@searchspace.app.
• You can use Searchspace without an account; only the device identifier and technical data above apply.
• You can clear cookies and local storage in your browser at any time.

If you are in the European Economic Area, the United Kingdom, or California, you have legal rights to access, correct, delete, and restrict the use of your personal information, and to object to certain processing. To exercise them, contact us at the address below. We will respond within the time the law requires. Our legal basis for processing is performing the service you asked for, and our legitimate interest in keeping it secure and working.

Children

Searchspace is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has given us personal information, contact us and we will delete it.

Security

Data is encrypted in transit. Access to your saved spaces is restricted to your account by database-level rules. No system is perfectly secure, so please do not upload documents you would not want stored on a third party’s servers.

Changes

We will update this policy when our practices change and revise the date at the top. Material changes will be announced in the app.

Contact

Questions or requests: support@searchspace.app.