What we collect
Your email and sign-in (via Supabase, our database and auth provider; Google sign-in if you choose it). The analyses you run, meaning your answers and what the engine generates from them, so you can come back to them. Payment records from Stripe: what you bought and when, never your card number. If you join the waitlist, your email and nothing else. When you sign in, Supabase records the time and the IP address.
Where it goes
The text you submit is sent to the AI providers that power the analysis: Anthropic, and where the audit compares assistants, OpenAI, Perplexity, and Google. We send them the content of your run, not your account details. Vuni runs on Render in the United States and keeps its database on Supabase in Canada. Email is sent through Resend. Anthropic and OpenAI keep what we send them for up to 30 days to check for abuse, then delete it. Your data is not used to train anyone’s models by us, and we do not sell it or share it with advertisers. Ever.
Who can see it
You, on your account. Vuni’s administrators can review analyses for quality. The people building the product, bound by this page. Nobody else.
Analytics
We count which pages are visited and which buttons are used, in our own database, tied to a random browser id rather than your name. In countries that require consent, Google Analytics and Microsoft Clarity load only after you say yes in the banner, and Clarity masks everything you type. No advertising networks, no data brokers, no cross-site tracking.
The waitlist gets an email when Vuni opens and founding-user pricing details. Transactional email (receipts, sign-in) comes with using the product. No marketing lists you did not join.
Deleting your data
Email shira@hunterandbard.com and we delete your account, your analyses, and your waitlist entry. Stripe’s payment records persist as long as tax law requires.
Your rights
If you are in the EU or UK, you can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Email shira@hunterandbard.com. Business customers who need a data processing agreement can ask for one at the same address.