Privacy and data handling

TailLumen collects only the information a user submits to the advisor flow, such as email, household context, pet or intended pet context, goals, constraints, budget context, region context, and consent choices.

AI processing consent is required before live AI mode may process advisor input. Memory consent is required before advisor context is saved as draft memory. Marketing consent is separate and does not send real email until email infrastructure and unsubscribe handling are approved.

Service-role database access must remain server-side. Secrets must never be committed to the repository or exposed in client code. Real partner handoff, checkout, medicine-channel, insurance, veterinary referral, and analytics tracking require additional disclosures and review gates.

This page is a product draft for demo and engineering readiness. It is not a substitute for attorney-reviewed privacy terms.