Privacy Notice

Who is responsible

AI Council is operated by Joshua Sorell, operating as Lunar Ley Lines, a trade name registered in Alberta, Canada (registration number TN23812118). Joshua Sorell, operating as Lunar Ley Lines is the controller of the personal data described here and decides how and why it is used.

What we collect and why

• Account details (email address, login credentials, or sign-in from Google) — to create and secure your account. Basis: performing our contract with you.
• Questions and AI answers — to run the council and save your conversations. Basis: contract.
• Credit balance, usage, and purchase records — to charge usage and show your billing history. Basis: contract and legal obligations (record keeping).
• Guest session identifier (a hashed value in a cookie) — to apply the free guest question limit and prevent abuse. Basis: legitimate interests.
• Technical data (IP address, device and browser information, error logs) — for security, fraud prevention, and fixing problems. Basis: legitimate interests.
• Support messages — to answer you. Basis: contract and legitimate interests.

We do not sell your personal data or use it for advertising.

Who we share it with

• Service providers: hosting and database providers, and AI model providers reached through OpenRouter, which receive your questions to generate answers.
• Paddle, our Merchant of Record, for the sale of credits, subscription management, payments, tax compliance, and invoicing. Paddle collects payment details directly under its own privacy notice.
• Professional advisers such as lawyers and accountants.
• Authorities where required by law.

International transfers

Our providers may process data outside Canada, including in the United States and the EU. We rely on contractual and other safeguards to protect it.

How long we keep it

Account data and conversations are kept while your account is active and deleted or anonymised when no longer needed. Purchase records are kept as long as tax and accounting laws require. Guest session data is kept only as long as needed to enforce limits.

Your rights

Under Canadian privacy law (PIPEDA and Alberta's PIPA), and, where applicable, the GDPR, you can ask to access, correct, or delete your personal data, object to or restrict certain uses, receive a copy, and withdraw consent. We respond within 30 days. You can also complain to the Office of the Information and Privacy Commissioner of Alberta, the Privacy Commissioner of Canada, or your local authority. Contact us by replying to any email from us or through your purchase receipt.

Security

We use appropriate technical and organisational measures, including encrypted connections, hashed identifiers, and access controls limiting each account to its own data.

Cookies

We use only essential cookies and browser storage: to keep you signed in and to apply guest limits. We do not use analytics or marketing cookies. Blocking them in your browser may stop the service from working.