privacy policy

last updated: july 14, 2026

this policy explains what data emptywords.co (the “site”) and our Telegram bot (the “bot”, and together with the site, the “service”) collect, how it is used, and your rights. the service is operated by Empty Words LLC. by using the site or by messaging the bot, you agree to this policy and to the collection, storage, and use of your data, including the messages you exchange with the bot, as described below. if you do not agree, do not use the service.

1. what we collect

account information. username, email address, and a hashed PIN. if you arrive through an access request, the email you submitted. after you accept the bot’s privacy notice and message the bot, we store your numeric Telegram account or chat identifier and the public profile fields Telegram supplies with the message, which may include your Telegram username, first name, and last name. if you separately authorize Telegram sign-in on the site, Telegram supplies the same identity fields and may also supply your public profile photo. we use these fields to link the bot conversation to the correct account, show the person accurately in the admin area, and provide account or billing support. the bot and current Telegram sign-in flow do not automatically give us your phone number or Telegram account email address. we collect either only if you deliberately provide it through another form or message.

payment information. payment processing for Empty Words Private is handled by Stripe. we do not store your card number, CVV, or full payment details. Stripe gives us limited transaction and subscription evidence such as a customer, invoice, or subscription identifier, amount and currency, status, and expiration date so we can deliver and reconcile access. see Stripe’s privacy policy.

usage data. we collect data about how you interact with the site: pages visited, time spent reading, interactive responses and internal results, and session timing. inside the Empty Room, this includes the chosen duration, the time of each skipped pulse in the point, whether a tap arrived within the response window, reaction time for a registered tap, the time of each mark, and whether the chosen duration ended. when the room was opened from Telegram, we store a cryptographic digest of the one time return token so the bot can retrieve the correct record; we do not store the raw return token. this data is tied to your account and used to personalize your experience and maintain your private sight record.

conversation data. after you accept the bot’s privacy notice and use the bot, we collect and store the messages you send to it and the messages it sends to you, including text, any voice notes you send, and their transcriptions. collection may begin before you have created or linked a website account, and we retain your Telegram identifier so this activity can be linked to your account if and when you create or connect one. relevant conversation content may first be sent to Anthropic through a locally authenticated Claude subscription session to generate a bot reply. when that path is unavailable, relevant conversation content is sent to the OpenAI API for reply generation. voice-note audio is sent to the OpenAI API for transcription. these conversations are used to deliver and personalize the service, record what surfaced, measure return state, and, as described below, maintain and improve the quality, safety, and accuracy of the service. do not send highly sensitive information that you do not want these providers to process.

technical data. browser type, device type, IP address, and referring URL. collected automatically through standard web server logs and client-side analytics.

local storage. the site stores session data, path progress, and authentication tokens in your browser’s local storage. this data stays on your device unless synced to our servers as described above.

2. how we use your data

  • to provide and personalize the service (content progression, conversation and path state, subscription management), including operating the bot and delivering its conversations and paths
  • to process payments and manage subscriptions
  • to send transactional emails (account confirmation, subscription activation, access request status)
  • for quality assurance and to train, maintain, and improve the service: we review and analyze usage data and bot conversations to monitor and improve the quality, safety, and accuracy of the bot and its guided interactions, and to develop and refine our models and content
  • to improve the site and content based on aggregate usage patterns
  • to enforce our terms of service

we do not sell your personal data. we do not use your data for advertising. we do not share your personal data with third parties for their marketing purposes.

3. third-party services

we use the following services that process your data:

  • Supabase (database, authentication, serverless functions): stores account data, usage data, and content. Supabase privacy policy.
  • Stripe (website payment processing): processes website subscriptions and payments. Stripe privacy policy.
  • Telegram (bot operation and account linking): delivers bot messages and the first conversation, supplies the Telegram identity fields described above, and links bot access to Private after Stripe confirms payment. Telegram privacy policy.
  • Anthropic (first reply path when available): processes the relevant bot conversation content and context through a locally authenticated Claude subscription session. Because this is a consumer Claude subscription path rather than the Anthropic API, the subscription account’s privacy settings and Anthropic’s consumer terms govern this processing. Anthropic says consumer Claude and Claude Code chats may be used to improve its models if the account allows model improvement, if material is explicitly submitted or opted in, or if a conversation is flagged for safety review. Anthropic also describes consumer retention and deletion rules, with exceptions for safety enforcement and legal requirements. Anthropic consumer model-training policy and consumer data retention.
  • OpenAI (durable reply fallback and voice transcription): processes relevant conversation content when the Anthropic path is unavailable and processes voice-note audio to produce a transcript. reply requests use the OpenAI API without asking OpenAI to store response application state. OpenAI states that API inputs and outputs are not used to train its models by default unless the customer opts in. default abuse-monitoring logs may be retained for up to 30 days, while the audio-transcription endpoint has no application-state retention according to OpenAI’s endpoint table. OpenAI API data controls and business data privacy.
  • Resend (transactional email): sends account and subscription emails. Resend privacy policy.
  • GitHub Pages (hosting): serves the static site. GitHub privacy statement.

4. data retention

account data is retained as long as your account exists. if you request account deletion, we will remove your personal data within 30 days. aggregated, anonymized data may be retained indefinitely.

payment records are retained as required by tax and financial regulations.

5. your rights

you may:

  • request a copy of your personal data
  • request correction of inaccurate data
  • request deletion of your account and associated data
  • cancel your subscription at any time

to exercise these rights, contact hello@emptywords.co.

if you are in the European Economic Area, you have additional rights under the GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority. where you exercise your right to data portability, we will provide your personal data in a structured, commonly used, machine-readable format (JSON or CSV).

if you are a California resident, you have rights under the CCPA including the right to know what data is collected, the right to deletion, and the right to opt out of sale. we do not sell personal data.

we do not sell your personal data to third parties. we do not collect biometric identifiers.

6. cookies

the site does not use third-party tracking cookies. we use browser local storage for authentication and path state as described above.

7. children

the site is not intended for anyone under 18. we do not knowingly collect data from anyone under 18. if we learn we have collected such data, we will delete it.

8. international users

the site is operated from the United States. if you access the site from outside the US, your data will be transferred to and processed in the US. by using the site, you consent to this transfer.

if you are in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases:

  • performance of a contract. account information, payment information, and usage data necessary to deliver the subscription you signed up for.
  • legitimate interests. technical data and aggregate usage analytics used to secure, maintain, and improve the site, balanced against your rights and interests.
  • legal obligation. payment and tax records we are required to retain under applicable law.
  • consent. any processing you have specifically agreed to, which you may withdraw at any time by contacting us.

10. data breach notification

we maintain reasonable safeguards to protect your data. in the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay and, where required, within 72 hours of becoming aware of it. where the breach is likely to result in a high risk to you, we will notify you directly without undue delay.

11. changes

we may update this policy at any time. changes will be posted on this page with an updated date.

12. contact

questions about this policy: hello@emptywords.co