Privacy Policy

Account information. Your email address, which is how you sign in, and the workspace name you choose.

Your research content. The questions you submit, your answers to our clarifying questions, and the briefs and other deliverables we produce for you. This can include confidential business information, so we treat it as confidential (see below).

Payment information. Payments are handled by Stripe on its own checkout page. We receive your name, email, the amount, and whether the payment succeeded or was refunded. We never see or store your full card number.

Technical information. Our hosting and database providers record standard request logs (IP address, browser type, the pages requested and when) for security and reliability. We don’t use analytics or advertising tools.

Messages. Anything you send us by email.

• To run your research: asking clarifying questions where needed, running the research, and delivering the brief.
• To review every brief before it's released. Chris Coppa, who runs Triverdict for CKKC, reads your question, your answers and the brief to do this.
• To operate your account: signing you in, taking payment, issuing refunds, and answering support requests.
• To keep the service secure: preventing abuse, investigating problems, and keeping audit records.
• To meet legal obligations, such as tax and accounting records.

If you’re in the European Economic Area or the UK, our legal basis is the contract with you for the first three, our legitimate interest in a secure service for the fourth, and legal obligation for the last.

Triverdict uses AI models to analyze your question, search and read public web sources, and draft the brief. Your question and answers are sent to our AI and search providers only to produce your brief. Search providers receive search queries derived from your question and the addresses of the web pages the research reads, which they retrieve on our behalf. They don’t receive your account details, and the websites being read see requests from those providers, not from you. Search providers keep their own request logs, which can include those queries, under their own retention settings. If a name in your question is sensitive, you can describe it instead of naming it.

We don’t use your content to train AI models, and we don’t reuse one customer’s content in another customer’s research.

We use the service providers below to run Triverdict. Each receives only what its job requires.

Supabase

Database and sign-in

Receives: Everything in your account

Where: United States (California)

Postmark

Sending sign-in emails

Receives: Your email address and one-time sign-in link

Where: United States

Vercel

Hosting the website and app

Receives: Requests to the site, including IP address

Where: United States

Trigger.dev

Running research jobs in the background

Receives: Your question and answers while a job runs

Where: United States

Anthropic

AI models that analyze your question and write the brief

Receives: Your question, clarifying answers and source material

Where: United States

Firecrawl and Exa

Web search and retrieving the pages the research reads

Receives: Search queries derived from your question, and the addresses of pages to retrieve

Where: United States

Stripe

Payments

Receives: Name, email, payment details and purchase record

Where: United States

GoHighLevel

Our customer records (CRM)

Receives: Your name and email address, and order details: project reference, tier, status and amount paid. Never your question, answers or brief

Where: United States

We’ll update this list before we add a provider that receives your information. Beyond these providers, we disclose information only when the law requires it, to protect the rights or safety of our users or others, or as part of a merger or sale of the business (in which case this policy continues to apply to it).

Other people in your workspace can see its research and deliverables. At CKKC, only Chris Coppa reads customer content, and only to review briefs, support you, or keep the service secure. Access through our operator tools is logged. If your question calls for a higher level of confidentiality, you can ask about a mutual NDA before you submit it.

We do not sell or share personal information as those terms are defined in California law, and we don’t use it for targeted advertising.

Triverdict sets only the cookies needed to keep you signed in. They’re set when you sign in and cleared when you sign out. We don’t use analytics, advertising or tracking cookies.

Because we don’t track you across other websites and don’t sell or share personal information, a browser “Do Not Track” or Global Privacy Control signal doesn’t change anything we do: we already behave as if it were on.

We keep your account and research while your account is open, so you can return to your briefs. You can ask us to delete a project, close a workspace, or close your account at any time (see “Your choices and rights” below). We complete a request to delete a project within 5 business days.

Deleting a project removes its title, question and context, your answers to our clarifying questions, the brief and the research log. We keep a record that the project existed (its reference, tier, status and dates) and its payment records.

Closing a workspace deletes the content of every project in it, removes everyone’s access and the workspace name, and deletes its customer record at Stripe. Closing your account deletes your sign-in, your profile (including your email address) and your workspace memberships, and removes your email address from the Stripe customer record of any workspace you still belonged to. If Stripe can’t be reached at the time, we finish that step by hand. It also removes your Triverdict records from our CRM (GoHighLevel); if CKKC holds your contact for another service, only the Triverdict details are removed. Projects you created stay with their workspace unless the workspace is closed too.

What we keep after that. Payment and refund records, which we keep for tax and accounting purposes. Records of what the research cost; once a project is deleted, these no longer describe what was researched. Our security audit log, which notes what changed, by whom and when, but not the text of your questions, answers or briefs, and not your email address or workspace name; it can’t be changed through normal operations. And a log of what CKKC staff did through our operator tools, including the reason they gave. Staff are told not to copy your content into those reasons, but the reasons are kept.

Our providers keep some information under their own terms: Stripe keeps payment records, and our hosting and database providers keep system logs, such as sign-in events and request logs, under their own retention settings. Deleted information can also remain in backups until they expire.

Data is encrypted in transit, and our database provider encrypts it at rest. Each workspace’s data is isolated at the database level, so one customer can’t read another’s. Staff access is restricted, access through our operator tools is logged, and requests the research makes to outside websites go through safeguards that stop them reaching our internal systems. No system is perfectly secure, and we can’t guarantee that. If a breach affects your information, we’ll notify you as the law requires.

You can ask us to:

• tell you what personal information we hold about you, and give you a copy;
• correct information that's wrong;
• delete your information, subject to the limits above;
• send your research to you in a portable format.

Email info@ckkcassociates.com from the address on your account. We may ask you to confirm the request from that address. We’ll acknowledge it within 10 business days and respond within 45 days. We won’t treat you differently for making a request.

California residents have these rights under California law, plus the right to know the categories of information described in this policy and the right to limit use of sensitive personal information. We don’t ask for sensitive personal information, and we don’t sell or share personal information. You can use an authorized agent to make a request.

If you’re in the EEA or the UK, you also have the right to object to or restrict processing, and to complain to your local data protection authority. Triverdict is run from the United States, and your information is processed there.

Triverdict researches business decisions. Please don’t include health information, government ID numbers, financial account numbers, or personal details about private individuals in your questions. Our Terms of Service don’t allow research into private individuals.

Triverdict is a business service for people 18 and over. We don’t knowingly collect information from children. If you believe we have, email info@ckkcassociates.com and we’ll delete it as described under “How long we keep it”.

If we change this policy, we’ll update the date at the top. If a change materially affects how we use information we already hold, we’ll email account holders before it takes effect.

CKKC Associates LLC, Huntington Beach, California. Email info@ckkcassociates.com.