Privacy Policy
How Caveat AI handles your information.
Last updated: 27 September 2026
Caveat AI reviews an AI-generated answer you choose to challenge. Privacy questions: support@askcaveat.com.
Reviews
On ChatGPT, Claude, Gemini, Perplexity and Copilot, “Challenge this answer” sends the selected answer to our servers and to Anthropic, which writes the review. We use that text to create the review. We do not store the challenged answer or the review in our database, and we do not use it for advertising. The extension can keep a small cache of recent reviews on your device. That cache is not copied to our database.
Information we keep
- Account and usage. Email, account id, plan, and a browser id linked after you sign in. Usage records store an identifier, plan, period and review count, without the answer text. Allowances are Free 5 reviews, Standard 100, Pro 300, and Team 400 per person each month.
- Subscriptions and top-ups. Stripe customer and subscription ids, plan status, and top-up balances. We do not store card numbers. A top-up is 100 extra reviews for £5 and does not change your plan.
- Feedback. Category, text, account id where we have one, plan, browser, extension version, and time sent. Feedback does not automatically include the AI conversation, the challenged answer, or the review.
- Referrals and introductions. Referral code, the referrer, the referred account once attribution is valid, and commission status. A business introduction stores company name, contact name, work email, an optional note, and your user id. An introduction does not by itself create commission. See the Referral programme terms.
- PayPal. If you add payout details, we store the PayPal email you give us, and later the amount, reference and date. We do not collect PayPal passwords or bank details.
- StackSocial lifetime plans. A hash of the serial, its status, the account that redeemed it, and the entitlement. The plaintext serial is not stored. Standard Lifetime is 20 reviews a month and 10,000 characters. Pro Lifetime is 40 reviews a month and 15,000 characters. Redeeming a code does not cancel an existing Stripe subscription.
Who helps us run Caveat
Supabase holds accounts and the database. Stripe takes subscription and top-up payments. Vercel hosts the site and API. Anthropic writes the review. PayPal is the payout destination you give us. Google Analytics is optional and loads only after you accept it. Some of these providers may process data outside the United Kingdom. Where the law requires a safeguard for that transfer, we use one.
Analytics
Essential browser storage covers sign-in, linking the extension, a referral code, and a serial held while you redeem it. Rejecting analytics does not block those. Your choice is stored on this browser. Details are in the Cookie policy.
Security and how long we keep information
We use encrypted connections and keep service credentials on the server. We keep personal information while the account or record is needed, and afterwards where we need it for accounting, tax, disputes or security. Logs are kept for a limited operational period. Information from the extension is used to provide the review you request. We do not sell it or use it for advertising.
Your rights
You can ask to access, correct or delete personal information we hold, or object to certain uses. Email support@askcaveat.com.
We may update this policy. The date at the top will change.