Privacy Policy

What Data We Collect

We collect full names, email addresses, your role in the Church, and — when provided — ecclesiastical titles and organization or eparchy names, submitted voluntarily via our access request form. No payment information is collected.

How We Use Your Information

The details you submit are used solely to review your access request and, if approved, to send your invitation and account-related emails. We do not send marketing emails. We will not sell your information, and we will not share it with third parties except with Supabase, our database and authentication provider, which stores it on our behalf.

Access Request Processing

Access request submissions are verified by Cloudflare Turnstile, a bot-protection service that runs on the form page, then sent to our backend and stored with Supabase. Requests from email domains on our approved-domain allowlist receive an invitation automatically; all others are reviewed by our team.

Analytics

Byzantine AI uses Google Analytics 4 (GA4) on both the marketing site and the chat application to collect anonymous usage data — pages visited, time on site, general geographic region, device type, and referral source. GA4 uses first-party cookies to distinguish unique visitors. IP anonymization is enabled by default. No advertising features, remarketing, or Google Signals are enabled.

The chat application additionally uses Azure Application Insights to record anonymous product-usage events — such as starting a chat, sending a message, or encountering a stream error — so we can monitor reliability and improve the experience. Application Insights is operated by Microsoft and does not collect advertising identifiers.

Cookies

GA4 sets the following cookies when you accept analytics:

• _ga — 2 year expiry, used to distinguish unique visitors
• _ga_<container-id> — 2 year expiry, used to persist session state

On the chat application, Azure Application Insights sets the following cookies when you accept analytics:

• ai_user — 1 year expiry, used to identify the anonymous user across sessions
• ai_session — 30 minute sliding expiry, used to group activity into a single session

No other cookies are set. The cookie consent banner must be accepted before any of these load.

Hosting

This site is hosted on Azure Static Web Apps. Azure may collect standard server logs (IP address, request timestamps) as part of normal hosting operations.

Fonts

Fonts are self-hosted at build time via Next.js. No runtime requests are made to Google or any external font service.

Third-Party Services

• Supabase — database and authentication (stores access requests and accounts)
• Cloudflare Turnstile — bot protection on the access request form
• Google Analytics — anonymous site analytics
• Azure Application Insights — anonymous product-usage telemetry for the chat application
• Azure Static Web Apps — hosting

Opting Out

You can decline analytics cookies via the consent banner. If you previously accepted, you can clear your localStorage or use browser cookie controls. The Google Analytics Opt-out Browser Add-on also works. To withdraw an access request or have your details deleted, email support@byzantine.ai.

Data Retention

Access request details are retained while your request is pending and, if approved, for as long as your account remains active. You may request deletion at any time. GA4 data is retained per Google's default settings.

Children's Privacy

This site is not directed at children under 13. No personal information is knowingly collected from children.

Changes to This Policy

This policy will be updated if data collection practices change.