Legal

Privacy Policy

Effective date: 9 May 2026 · Last updated: 9 May 2026

Draft: counsel review required before launch This document is a working draft prepared by the platform team. Sections flagged below contain placeholders or unresolved business decisions that an attorney must confirm or revise before the platform accepts paid users or scales beyond limited beta.

1. Scope

This Privacy Policy describes how the Emerging Technologies Lab ("ETL", "we") collects, uses, and shares information when you use Intel Dashboard ("the Platform"). It applies to all visitors and registered users of the Platform.

2. What We Collect

The Platform is designed to minimize data collection. Most user-supplied content is processed in transit and not retained on ETL servers. The categories below describe what does and does not leave your device.

Source	Information	Where it goes
Card 01: Source Reliability Scoring	One pasted source per run (text only); optional context note	Sent to Anthropic for inference; not retained by ETL after the response.
Card 02: Multi-Source Corroboration Checker	Two to five labeled sources per run, plus an optional context note	Sent to Anthropic for inference; not retained by ETL after the response.
Card 03: Deception & Manipulation Indicators	One pasted text per run; optional context note	Sent to Anthropic for inference; not retained by ETL after the response.
Card 04: Cognitive Bias Detector	One pasted analytic product per run; optional context note	Sent to Anthropic for inference; not retained by ETL after the response.
Card 05: Missing Questions Engine	One pasted analytic product per run; optional context note	Sent to Anthropic for inference; not retained by ETL after the response.
Card 06: Timeline Reconstruction Engine	One pasted block of text per run; optional context note	Sent to Anthropic for inference; not retained by ETL after the response.
Card 07: Narrative to Matrix Converter	One pasted narrative per run; optional context note	Sent to Anthropic for inference; not retained by ETL after the response.
Card 08: Actor Network Mapping	One pasted document per run; optional context note	Sent to Anthropic for inference; not retained by ETL after the response.
Card 09: Pattern Recognition	Corpus text or attached files	Sent to Anthropic for inference; not retained by ETL after the response.
Card 10: Threat Actor Pattern Extraction	One pasted incident description or threat report per run; optional context note	Sent to Anthropic for inference; not retained by ETL after the response.
Card 11: Symbol Intelligence	User-submitted reports: photos, geolocation, optional uploader name and contact	Stored by ETL for review; gated mapping access available to verified law-enforcement only.
Card 12: OPSEC Risk Scan	One pasted document per run; optional context note	Sent to Anthropic for inference; not retained by ETL after the response.
Card 13: Red-Team Question Generator	One pasted scenario, hypothesis, or analytic product per run; optional context note	Sent to Anthropic for inference; not retained by ETL after the response.
Card 14: Structured Analytic Techniques Wizard	Selected technique (ACH, KAC, I&W, or Premortem) plus one pasted analytic question, hypothesis, or product per run; optional context note	Sent to Anthropic for inference; not retained by ETL after the response.
Card 15: SLR Studio	Search queries	Sent to OpenAlex (academic database) and to Anthropic for synthesis.
Card 16: Dual-Use Triage	Triage scenario text and selected mode (retail, research-security)	Sent to Anthropic for inference; not retained by ETL after the response.
Card 17: Document Gap Analysis	Document text you upload or paste	Sent to Anthropic for inference; not retained by ETL after the response.
Card 18: Operational Readiness	Resume / CV text, role profile	Sent to Anthropic for inference; not retained by ETL after the response.
Intel Publisher	Document title, author, organization, classification, theme, uploaded logo, uploaded signature, advertising-consent flag	Stored only in your browser’s local storage. Never transmitted to ETL unless you click “Submit to ETL.”
Intel Chat (assistant)	Your typed queries and message history	Sent to Anthropic for inference. Conversation history may be cached locally for the active session.
Account	Email, password (hashed), display name, optional agency affiliation	Stored by our authentication provider (Supabase) for session and access control.
Puzzle of the Day	Streak count, last-played date, last 90 puzzle accuracy scores	Stored only in your browser’s local storage. Never transmitted to ETL.
Browser	Theme preference (dark / light), draft handoff between modules, Vimeo and OpenStreetMap session cookies	Stored in your browser’s local storage; tile / video providers may set their own cookies.

3. What Stays on Your Device

Several pieces of data never leave your browser unless you take an explicit action:

Intel Publisher branding (title, subtitle, author, organization, classification, theme, logo image, signature image, advertising-consent flag).
Theme preference (dark / light).
Drafts being passed between modules via local storage.

These persist only on the browser you used to enter them. Switching browsers, switching computers, or clearing browser data resets them. ETL has no copy.

4. How We Use Information

We use the information we collect to:

Deliver the analytical service you requested (process your query and return a response).
Operate, maintain, and secure the Platform.
Investigate and respond to reports of misuse, security incidents, or violations of the Terms of Service.
For Card 06 reports: support law-enforcement review, statistical analysis of symbol prevalence, and public-safety research.
Communicate with you about service issues, updates, or, if you opt in, marketing.

We do not sell personal information. We do not use your User Content to train models, and we do not authorize third-party processors to do so. (See Section 5 for processor specifics.)

5. Third-Party Processors

The Platform relies on a small number of vendors to deliver functionality. Each operates under its own privacy policy.

Anthropic (LLM inference). Receives your prompts and User Content. Anthropic’s commercial terms govern retention and training-use.
OpenAlex (academic literature). Receives Card 05 search queries.
Vimeo (video hosting on the home page). Loads its player script and may set cookies for analytics.
OpenStreetMap / Leaflet (Card 06 map tiles). Tile requests reveal your IP address and the map area you view.
Supabase (authentication and database for accounts and Card 06 reports).
Netlify (web hosting and serverless functions).

Counsel review: subprocessor list Confirm the active subprocessor list at the time of launch. If we add Stripe or another billing processor for subscriptions, this section must be updated. Vendors with EU data flows may require Data Processing Agreements.

6. Card 06 Symbol Reports: Special Handling

Reports submitted through Card 06 (Symbol Intelligence) may contain photographs, geographic coordinates, and optional uploader contact information. Handling is as follows:

Civilian view of the map. Reports are aggregated and blurred to a coarse area until a verified law-enforcement reviewer has triaged them. Personal contact details are never shown publicly.
Law-enforcement view. Verified agency users see exact coordinates, full photos, and uploader contact (if provided) for the purpose of investigation and public-safety follow-up.
Retention. Reports are retained for the period required to support investigation and statistical analysis, then de-identified or deleted on a documented schedule.
Removal. If you submitted a report and want it removed, contact us at the address in Section 11.

Counsel review: report handling & LE access Card 06 stores user-submitted PII (photos, geolocation, contact). The retention schedule, the LE-verification standard, and any cross-border transfer to investigative partners must be defined and documented before this feature accepts public submissions.

7. Cookies and Tracking

The Platform itself does not use third-party advertising cookies or behavioral analytics. We use the following cookies and similar storage:

Local storage. Stores theme preference, Publisher branding, and draft handoffs between modules. Lives only on your device.
Authentication session. Standard session cookies for signed-in users (set by Supabase).
Embedded vendors. Vimeo and OpenStreetMap may set their own cookies as part of video playback and tile delivery.

8. Data Retention

User Content sent to Anthropic for inference: not retained by ETL after the response is returned to you. Anthropic’s own retention applies.
Account information: retained while your account is active and for a reasonable period after closure for legal and audit purposes.
Card 06 reports: retained per the schedule referenced in Section 6.
Local storage: retained until you clear your browser data.

Counsel review: retention windows Concrete retention windows (in days or years) are unset. They should be defined per data category, documented in an internal data-retention schedule, and reflected in this section.

9. Your Rights

Depending on your jurisdiction, you may have rights to:

Access the personal information we hold about you.
Correct inaccurate information.
Delete your account and associated data.
Export your data in a portable format.
Object to or restrict certain processing.
Withdraw consent (including the “Use my brand” consent in the Intel Publisher).

To exercise any of these rights, contact us at the address in Section 11.

Counsel review: jurisdictional rights The exact rights, response timeframes, and verification process depend on which privacy laws apply (GDPR for EU users, CCPA / CPRA for California, state laws like VCDPA / CPA / CTDPA, FERPA for student data, etc.). The list above is illustrative and must be tightened per jurisdiction before launch.

10. Children’s Privacy

The Platform is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will delete it.

11. International Users

The Platform is operated from the United States. If you access it from outside the U.S., you understand and agree that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

Counsel review: international transfer EU / UK customers will require a transfer mechanism (Standard Contractual Clauses, adequacy decision, or other) and a more detailed cross-border-transfer notice. Defer marketing to those regions until the legal scaffolding is in place.

12. Security

We use industry-standard safeguards to protect your information, including TLS in transit, hashed passwords, and access controls on our authentication provider. No system is perfectly secure, and we cannot guarantee that information will never be accessed without authorization. If we discover a breach affecting your information, we will notify you and applicable authorities as required by law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a new effective date. Continued use of the Platform after changes take effect constitutes acceptance of the revised Policy.

14. Contact

Questions about your privacy, or want to exercise any of the rights in Section 9? Reach us through the contact form.