← Back to Ancaire Labs

Privacy

Ancaire Labs is built to be quiet. It sets no tracking cookies, runs no analytics, and carries no advertising or marketing pixels. This notice explains what the labs do with information when you use them. It covers the labs at ancaire.ai. The firm's main site, ancaire.co, carries its own policy, which also covers the contact brief and the client portal.

In short

Who we are

Ancaire ("we," "us") operates this lab at ancaire.ai. For the purposes of applicable data-protection law, we are the controller of the limited information described here. You can reach us about privacy matters at privacy@ancaire.co.

What we do not do

We want to be specific, because most websites cannot say this:

• We do not use tracking, advertising, or analytics cookies.
• We do not run analytics platforms. No Google Analytics, Tag Manager, or similar.
• We do not embed advertising or social-media tracking pixels.
• We do not build profiles of visitors or track you across other websites.
• We do not sell, rent, or trade your information.

To keep the lab running and to catch abuse, our edge keeps minimal, non-identifying operational records, for example that a chat turn happened or that an assessment was generated. These contain no message content, no names or emails, and nothing that identifies you or follows you across visits. They are operational records, not analytics, and they set no cookies.

The only value the lab stores on your device is a small, non-identifying flag that remembers you dismissed the welcome notice, so it does not reappear every visit. It holds no personal information. Separately, the human check described below may set a short-lived technical value to tell people apart from automated abuse. It is a security measure, not tracking, and we build no profiles from it.

What the lab does with what you type

The labs use an AI service configured by Ancaire: Anthropic's Claude API or OpenAI's GPT API. AncaireAI and the console guides, the one-page assessment, the E-IQ score, and the other lab instruments run through that service. They are optional. You can explore the map without typing anything.

• The text you enter in a lab, such as a question, a program description for an assessment, or text you paste into a lab, is sent to the AI provider configured for that lab, Anthropic's Claude API or OpenAI's GPT API, to answer you. The lab conversations carry no name or email fields, so none are sent with the conversation. An invite-only preview's sign-in is separate, and is described below.
• The lab's guide does not run web searches. It is scoped to Ancaire and the M² framework.
• Nothing you type into a lab is sent to our staff. Your conversation and your assessment stay between your browser, our edge, and the configured AI provider, and we do not store or read them. Both providers state that business API content is not used to train their models by default. OpenAI requests are sent with response storage disabled, though limited abuse-monitoring retention may still apply; Anthropic also retains API content only for a limited period under its commercial terms. Each provider's processing is governed by its own terms.

Please do not enter confidential, regulated, or personal information about yourself or anyone else, or anything you are not free to share. The lab is a thinking tool, not a secure channel for sensitive data.

Invite-only lab previews

Most of the labs are open and anonymous. Some labs are different: they run as invite-only previews, so they ask for an email address. The controls below apply to every invite-only lab. Here is exactly what that involves.

• Requesting access. If you ask to join the preview, you give us your name and email, and optionally your organization and a short note. We relay that to our labs inbox so we can consider the request and reply. We also record the source IP address and the time, to deter abuse. This is sent and received as email. We do not build a separate marketing database from it.
• Signing in. If your address is on the invite list, you enter your email and we send you a single-use code that expires shortly. You enter the code to open the lab. So that we can watch the preview for abuse and respond to access interest, every sign-in attempt, whether or not the address is on the list, is relayed to our labs inbox with the email address, the source IP and approximate country, your browser user-agent and referring page, and the time. This is security and access information, not analytics, and we do not use it to follow you across other sites.
• What we hold for access. If you are invited, your email sits on an allowlist in Cloudflare key-value storage. The single-use code is held only briefly, and as a one-way hash, then discarded. After you sign in, a signed sign-in cookie, set by the server and not readable by scripts, keeps you signed in for a limited period, about 30 days, and a small companion value records that you have a session. These keep you signed in. They are not tracking.
• Email delivery. The code to you, and the access notices to our inbox, are sent through Resend, our email provider, described in the processors below.

We process this to run the invite-only preview, to confirm who may take part, to reply to access requests, and to protect the preview from misuse. Where the law asks for a basis, we rely on our legitimate interest in operating and securing an invite-only preview, and on taking steps at your request before any engagement. As with the other labs, what you type is sent to the AI provider configured for that lab to answer you and is not stored or read by us, so please paste only short excerpts, and nothing confidential, regulated, or personal.

Requesting a senior review

Each lab lets you ask for a senior review of your result, which turns the read into a conversation. It is opt-in, and here is what it sends.

• Who you are. In an invite-only preview you are already signed in, so the request uses the email from your sign-in session. In the open labs, the request asks for an email so a senior can reach you. We relay this to our labs inbox through Resend so we can follow up.
• The summary. If you choose to share it, we include the lab's derived findings, the observations, scores, and recommendations the lab produced, so the reviewer can prepare. We do not include the raw text you typed unless you add it yourself in the note. To help the reviewer prepare, those findings may be summarized for us by Anthropic, the provider that powers the labs, described in the processors above. You can send the request without the summary by clearing the consent box.
• What we keep. The request is sent and received as email. We do not build a separate marketing database from it, and the summary you choose to send is shared only with the Ancaire reviewer to prepare for your conversation, and is not otherwise stored.

Cookies and local storage

The lab uses only what it needs to work:

• A human-verification cookie set after the anti-abuse check, so you are not challenged again during your visit. It is signed by the server and is not readable by scripts.
• A short-lived session token used to rate-limit usage and keep the lab available.
• For invite-only previews, after you sign in with your code, a signed sign-in cookie that keeps you signed in for a limited period, and a small companion value that records you have a session. These appear only if you use the invite-only preview.
• A small flag in your browser that remembers you dismissed the welcome notice.

None of these track you across other websites, and the lab carries no advertising cookies.

Who processes it for us

We keep the number of third parties deliberately small:

• Cloudflare, our hosting and content-delivery provider. As with any website, Cloudflare processes basic technical request data, such as IP addresses and request metadata, at the network level to serve the lab and protect it from abuse. It also provides the bot protection behind the human check. This happens at the infrastructure layer and is governed by the Cloudflare privacy policy.
• Anthropic, the provider of Claude. The text you type is sent to Anthropic's API to answer you and compile your assessment. Anthropic processes this as our service provider. Under its commercial terms, API content is not used to train its models by default and is retained only for a limited period. See the Anthropic privacy policy.
• OpenAI, the provider of GPT. When OpenAI is configured for a lab, the text you type is sent to OpenAI's API to answer you and compile your assessment. OpenAI processes this as our service provider. API content is not used to train its models by default. We disable response storage on these requests; limited abuse-monitoring retention may still apply under OpenAI's API data controls. See the OpenAI enterprise privacy page.
• Resend, our transactional email provider. When you request access to an invite-only preview, sign in, or request a senior review, Resend delivers the single-use code to you and the access and review notices to our labs inbox. It processes the email addresses and message content needed to send that mail, as our service provider, governed by the Resend privacy policy.

We use no analytics, advertising, or data-broker services.

How long we keep it

We do not store your conversations or your assessments. For invite-only previews, the single-use sign-in code is held only for its short expiry; an invited email stays on the allowlist while you remain part of the preview, and is removed when you leave or on request; your sign-in session lasts about 30 days unless you clear it sooner. Access requests and sign-in notices reach our labs inbox as ordinary business email, kept no longer than needed to manage the preview. Our operational records are kept only as long as useful for running the labs and catching abuse, then discarded.

Your rights

Depending on where you live, you may have rights over your personal information, including to access, correct, or delete it, to object to or restrict its use, or to receive a copy. Because most of the labs collect no personal information about you, there is little for us to hold. If you have used an invite-only preview, we hold your email and the access records described above, and you can ask us to access or delete them. For any privacy question, or about information you have shared with Ancaire elsewhere, email privacy@ancaire.co. You also have the right to complain to your local data-protection authority, though we hope you will contact us first.

Children

This is a professional tool. It is not directed to children, and we do not knowingly collect information from anyone under 18.

International visitors

We are based in the United States, and our service providers may process information in the United States and other countries. If you use the lab from outside the United States, you understand that information will be handled as described here. Where required, we rely on appropriate safeguards for any international transfer.

Changes to this notice

If we change how the lab handles information, we will update this page and revise the date above. Material changes will be reflected here before they take effect.

Contact

Questions about this notice: privacy@ancaire.co. For the firm, the contact brief, and the client portal, see the full policy at ancaire.co.