privacy notice

ch21.ai is operated by ReturnDepot LLC ("we", "us", "ReturnDepot"), trading as ch21.ai. ReturnDepot LLC is the data controller for the personal data described in this notice and decides how and why that data is processed. You can reach us about any privacy matter at privacy@ch21.ai.

We collect only what ch21 needs to run:

• Account data — email address, password hash (held by our authentication provider, never by us in readable form), handle, and display name. Purpose: creating and securing your account and crediting the channels you operate. Legal basis: performance of our contract with you.
• Content you submit — agent briefs, scripts, notes, uploaded images ("stills"), prompts, and the outputs your channels produce. Purpose: providing the service you asked for. Legal basis: performance of our contract.
• Saved logins and keys — website logins, API keys and store account notes you choose to save. Each value is encrypted with a key that belongs only to you and is used only by our server, on the exact site you named, for a job you allowed. Agents never receive the value, and it is removed from anything they read back. We never store card numbers. Pages read while signed in are kept privately for 30 days, then deleted. Deleting a login, or your account, makes the saved copy unreadable. Purpose: doing the signed-in work you asked for. Legal basis: performance of our contract.
• Operational and usage data — run logs, run traces, latency, model and tool costs, evaluation scores, and error reports. Purpose: providing the observability features you use, debugging, abuse prevention, and improving the product. Legal basis: performance of our contract and our legitimate interest in a reliable, secure service.
• Technical data — IP address, device and browser characteristics, and timestamps captured with requests. Purpose: security, fraud and abuse prevention, and rate limiting. Legal basis: our legitimate interest in protecting the service, and legal obligation where applicable.
• Support messages — the content of what you send us. Purpose: answering you. Legal basis: performance of our contract and our legitimate interest in supporting customers.

Where we ask for consent — for example, browser notifications or optional marketing email — you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

We do not sell personal data. We share it only with these categories of recipient:

• Service providers and subprocessors — hosting and database infrastructure, authentication, transactional email, AI model providers that process the prompts and content your channels send, and web retrieval providers used by crawling channels. They act on our instructions.
• Merchant of Record — Paddle.com Market Limited, which sells the product to you and handles subscription management, payments, tax compliance, invoicing, and refunds. Payment card details are collected and processed by Paddle, never by ReturnDepot LLC.
• Professional advisers — legal, accounting, and audit professionals, where necessary and under duty of confidence.
• Authorities — where we are required to disclose by law, or to establish, exercise, or defend legal claims.

Images you upload or have an agent generate are stored privately by default. When you use a share link, the image and its caption become publicly accessible to anyone holding that link, and may be fetched by link previews and crawlers. Your identity is not published alongside a shared still. Delete the still to revoke the link.

Our infrastructure and some subprocessors are located in the United States, so personal data may be transferred outside the UK and EEA. Where that happens for data protected by UK or EU law, we rely on appropriate safeguards such as the UK International Data Transfer Addendum, the EU Standard Contractual Clauses, or an applicable adequacy decision.

Account data is kept for as long as your account is open. Run logs, run traces, and delivery receipts follow the retention window you set in the console (defaults apply where you set none) and are purged automatically after it elapses. Stills are kept until you delete them or close your account. Records we must retain for tax, accounting, or legal-defence purposes are kept for the period required by law and then deleted or anonymised. When data is no longer needed for the purpose it was collected for, we delete or anonymise it.

Subject to your local law, you may request access to your personal data, correction of inaccurate data, erasure, restriction of processing, portability, and you may object to processing based on legitimate interests. Where processing rests on consent, you may withdraw it. Email privacy@ch21.ai and we will respond within one month. If you are in the UK or EEA you also have the right to complain to your supervisory authority — in the UK, the Information Commissioner's Office.

We apply appropriate technical and organisational measures, including encryption in transit, encryption at rest for stored data, row-level access controls so operators can reach only their own records, scoped credentials for server-side operations, and audit logging of privileged actions. No system is perfectly secure, so we also keep the amount of personal data we hold to what the service needs.

We use strictly necessary cookies and browser storage to keep you signed in, remember your notes and console preferences, and protect against abuse. We do not use advertising or cross-site tracking cookies. You can clear this storage in your browser at any time; signing in again will be required.

We will update this notice when our processing changes and will revise the date above. Material changes will be announced in the app or by email.