← Back to Ancaire Labs

Privacy

Ancaire Labs is built to be quiet. It sets no tracking cookies, uses no third-party analytics platform, and carries no advertising or marketing pixels. This notice explains what the labs and Ancaire Markdown do with information when you use them. It covers the tools at ancaire.ai. The firm's main site, ancaire.co, carries its own policy, which also covers the contact brief and the client portal.

In short

Who we are

Ancaire ("we," "us") operates this lab at ancaire.ai. For the purposes of applicable data-protection law, we are the controller of the limited information described here. You can reach us about privacy matters at privacy@ancaire.co.

What we do not do

We want to be specific, because most websites cannot say this:

• We do not use tracking, advertising, or analytics cookies.
• We do not run analytics platforms. No Google Analytics, Tag Manager, or similar.
• We do not embed advertising or social-media tracking pixels.
• We do not build profiles of visitors or track you across other websites.
• We do not sell, rent, or trade your information.

To keep the tools running, understand whether features work, and catch abuse, our edge keeps minimal, non-identifying operational records, for example that a chat turn happened, an assessment was generated, or a conversion completed. These contain no message or document content, no filenames, no names or emails, and no identifier that follows you across visits. They are first-party product and operational records, not cross-site analytics, and they set no cookies.

The lab keeps small interface preferences in your browser, such as whether you dismissed a welcome notice. If you use the Value Creation Decision Workspace, its cases, assumption edits, diligence notes, initiative owners and metrics, and portfolio selection are also saved only in that browser so the working view can persist. Ancaire does not receive or read that browser-local workspace state. You can remove it by clearing this site's browser data; the private demonstration's Reset demo control also clears it. Separately, the human check described below may set a short-lived technical value to tell people apart from automated abuse. It is a security measure, not tracking, and we build no profiles from it.

Ancaire Markdown

Ancaire Markdown converts supported documents, spreadsheets, PDFs, and images on your device. Its conversion libraries, PDF reader, and English OCR model are served from ancaire.ai and run in your browser. Opening and converting a file does not upload the file, its text, its filename, or its OCR result to Ancaire or to an AI provider. If you choose a Lab handoff, the converted Markdown is held temporarily in that browser's session storage so it can survive an invite-only Lab sign-in. When you deliberately send a Lab question with that source attached, the converted text and filename are processed by the AI provider configured for that Lab in the same way as text you type into the Lab. The attachment is removed when you start over, remove it, or its handoff expires.

We record a narrow, anonymous event when the converter opens and when a conversion, OCR choice, copy, download, or Lab handoff succeeds or fails. An event can include only the file format, a broad file-size band, the selected Lab, a general success or error category, and whether the converter opened inside a Lab. It never includes document text, a filename, a page count, a URL, an email, an IP-derived identifier, or a persistent visitor identifier. This tells us, in aggregate, which capabilities work and where the product needs attention.

English is the only supported OCR language at launch. Spanish, Portuguese, and German are planned. OCR can make mistakes; compare converted text against the source before relying on it.

Policy Explorer

Policy Explorer opens an eligible policy file and constructs its working source map in your browser. The original file is not uploaded. For a PDF, the familiar original pages and aligned selection layer are also rendered locally in the browser. To check that the document is a supported policy and to answer an interactive question, the browser sends bounded portions of the extracted policy text, section labels, and any text you deliberately select to the AI provider configured for the lab. It does not send the complete original file as an attachment. Depending on the policy structure and the question, the bounded excerpts can include operative wording from several connected sections.

The source map, conversation, selected excerpts, candidate provision links, and named review views are held in memory for the current tab and are not stored by Ancaire. Closing or reloading the tab clears that workspace. An export is created on your device at your direction. The machine-readable JSON export omits the complete policy text; Word and Markdown review briefs contain only the excerpts you chose to save in review views.

Use Policy Explorer only with material you are authorized to process. Its classification, links, answers, and exports are working aids and may be incomplete. They are not coverage determinations, policy interpretations, or legal advice; compare them against the complete controlling policy.

What the lab does with what you type

The labs use an AI service configured by Ancaire: Anthropic's Claude API or OpenAI's GPT API. AncaireAI and the console guides, the one-page assessment, the E-IQ score, and the other lab instruments run through that service. They are optional. You can explore the map without typing anything.

• The text you enter in a lab, such as a question, a program description for an assessment, or text you paste into a lab, is sent to the AI provider configured for that lab, Anthropic's Claude API or OpenAI's GPT API, to answer you. The lab conversations carry no name or email fields, so none are sent with the conversation. An invite-only preview's sign-in is separate, and is described below.
• The lab's guide does not run web searches. It is scoped to Ancaire and the M² framework.
• Nothing you type into a lab is sent to our staff. Your conversation and your assessment stay between your browser, our edge, and the configured AI provider, and we do not store or read them. Both providers state that business API content is not used to train their models by default. OpenAI requests are sent with response storage disabled, though limited abuse-monitoring retention may still apply; Anthropic also retains API content only for a limited period under its commercial terms. Each provider's processing is governed by its own terms.

Please do not enter confidential, regulated, or personal information about yourself or anyone else, or anything you are not free to share. The lab is a thinking tool, not a secure channel for sensitive data.

Invite-only lab previews

Most of the labs are open and anonymous. Some labs are different: they run as invite-only previews, so they ask for an email address. The controls below apply to every invite-only lab. Here is exactly what that involves.

• Requesting access. If you ask to join the preview, you give us your name and email, and optionally your organization and a short note. We relay that to our labs inbox so we can consider the request and reply. We also record the source IP address and the time, to deter abuse. This is sent and received as email. We do not build a separate marketing database from it.
• Signing in. If your address is on the invite list, you enter your email and we send you a single-use code that expires shortly. You enter the code to open the lab. So that we can watch the preview for abuse and respond to access interest, every sign-in attempt, whether or not the address is on the list, is relayed to our labs inbox with the email address, the source IP and approximate country, your browser user-agent and referring page, and the time. This is security and access information, not analytics, and we do not use it to follow you across other sites.
• What we hold for access. If you are invited, your email sits on an allowlist in Cloudflare key-value storage. The single-use code is held only briefly, and as a one-way hash, then discarded. After you sign in, a signed sign-in cookie, set by the server and not readable by scripts, keeps you signed in for a limited period, about 30 days, and a small companion value records that you have a session. These keep you signed in. They are not tracking.
• Email delivery. The code to you, and the access notices to our inbox, are sent through Resend, our email provider, described in the processors below.

We process this to run the invite-only preview, to confirm who may take part, to reply to access requests, and to protect the preview from misuse. Where the law asks for a basis, we rely on our legitimate interest in operating and securing an invite-only preview, and on taking steps at your request before any engagement. As with the other labs, what you type is sent to the AI provider configured for that lab to answer you and is not stored or read by us, so please paste only short excerpts, and nothing confidential, regulated, or personal.

Requesting a senior review

Each lab lets you ask for a senior review of your result, which turns the read into a conversation. It is opt-in, and here is what it sends.

• Who you are. In an invite-only preview you are already signed in, so the request uses the email from your sign-in session. In the open labs, the request asks for an email so a senior can reach you. We relay this to our labs inbox through Resend so we can follow up.
• The summary. If you choose to share it, we include the lab's derived findings, the observations, scores, and recommendations the lab produced, so the reviewer can prepare. We do not include the raw text you typed unless you add it yourself in the note. To help the reviewer prepare, those findings may be summarized for us by the configured AI provider, Anthropic or OpenAI, described in the processors above. You can send the request without the summary by clearing the consent box.
• What we keep. The request is sent and received as email. We do not build a separate marketing database from it, and the summary you choose to send is shared only with the Ancaire reviewer to prepare for your conversation, and is not otherwise stored.

Cookies and local storage

Conversation history, attached Markdown, and pending handoffs may be kept in browser session storage to preserve your work in the tab. The Value Creation Decision Workspace persists saved cases in local storage across visits. Browser storage is distinct from server storage and AI-provider processing.

The lab uses only what it needs to work:

• A human-verification cookie set after the anti-abuse check, so you are not challenged again during your visit. It is signed by the server and is not readable by scripts.
• A short-lived session token used to rate-limit usage and keep the lab available.
• For invite-only previews, after you sign in with your code, a signed sign-in cookie that keeps you signed in for a limited period, and a small companion value that records you have a session. These appear only if you use the invite-only preview.
• A small flag in your browser that remembers you dismissed the welcome notice.
• If you use the Value Creation Decision Workspace, browser-local working state for its cases, assumption changes, diligence decisions, initiative tracking, and portfolio selection. This remains on that device unless you export it yourself. Use Clear saved workspace in the Decision Workspace to delete it, or clear the site's browser data.

None of these track you across other websites, and the lab carries no advertising cookies.

Who processes it for us

We keep the number of third parties deliberately small:

• Cloudflare, our hosting and content-delivery provider. As with any website, Cloudflare processes basic technical request data, such as IP addresses and request metadata, at the network level to serve the lab and protect it from abuse. It also provides the bot protection behind the human check. This happens at the infrastructure layer and is governed by the Cloudflare privacy policy.
• Anthropic, the provider of Claude. The text you type is sent to Anthropic's API to answer you and compile your assessment. Anthropic processes this as our service provider. Under its commercial terms, API content is not used to train its models by default and is retained only for a limited period. See the Anthropic privacy policy.
• OpenAI, the provider of GPT. When OpenAI is configured for a lab, the text you type is sent to OpenAI's API to answer you and compile your assessment. OpenAI processes this as our service provider. API content is not used to train its models by default. We disable response storage on these requests; limited abuse-monitoring retention may still apply under OpenAI's API data controls. See the OpenAI enterprise privacy page.
• Resend, our transactional email provider. When you request access to an invite-only preview, sign in, or request a senior review, Resend delivers the single-use code to you and the access and review notices to our labs inbox. It processes the email addresses and message content needed to send that mail, as our service provider, governed by the Resend privacy policy.

We use no third-party analytics, advertising, or data-broker services.

How long we keep it

We do not persist your conversations, assessments, converted files, or converted text on our servers. The browser may retain working copies as described above. For invite-only previews, the single-use sign-in code is held only for its short expiry; an invited email stays on the allowlist while you remain part of the preview, and is removed when you leave or on request; your sign-in session lasts about 30 days unless you clear it sooner. Access requests and sign-in notices reach our labs inbox as ordinary business email, kept no longer than needed to manage the preview. Content-free operational and Ancaire Markdown product events are retained for up to 90 days, then expire automatically.

Your rights

Depending on where you live, you may have rights over your personal information, including to access, correct, or delete it, to object to or restrict its use, or to receive a copy. Because most of the labs collect no personal information about you, there is little for us to hold. If you have used an invite-only preview, we hold your email and the access records described above, and you can ask us to access or delete them. For any privacy question, or about information you have shared with Ancaire elsewhere, email privacy@ancaire.co. You also have the right to complain to your local data-protection authority, though we hope you will contact us first.

Children

This is a professional tool. It is not directed to children, and we do not knowingly collect information from anyone under 18.

International visitors

We are based in the United States, and our service providers may process information in the United States and other countries. If you use the lab from outside the United States, you understand that information will be handled as described here. Where required, we rely on appropriate safeguards for any international transfer.

Changes to this notice

If we change how the lab handles information, we will update this page and revise the date above. Material changes will be reflected here before they take effect.

Contact

Questions about this notice: privacy@ancaire.co. For the firm, the contact brief, and the client portal, see the full policy at ancaire.co.