Privacy Policy

1. Introduction

Radiaq ("we", "us", "our") is an AI workspace and answer engine built by Trapezium. This Privacy Policy explains how we collect, use, store, and protect your information when you use Radiaq (available at radiaq.com).

By creating an account or using the Service, you acknowledge that you have read and understood this policy. If you do not agree with how we handle your data, please do not use Radiaq.

2. Information We Collect

Account Information

When you register, we collect your name, email address, and a securely hashed password. If you sign in via Google or another supported OAuth provider, we receive the basic profile data that provider shares — typically your name, email address, and profile picture. We do not receive your social account passwords.

Usage and Chat Data

We store the conversations you have with AI models on Radiaq, including messages you send and the responses generated. This allows you to access your conversation history across sessions. Usage counters (messages sent, files uploaded, web searches) are stored per day to enforce plan limits.

Uploaded Files

When you upload a document or image for AI analysis, the file and any extracted text are stored to process your request and display the result. Files are held in encrypted object storage. You may delete files at any time from your account settings. We do not use the content of your uploaded files to train AI models.

Payment Data

All payment processing for Pro and Max subscriptions is handled by Stripe. We never see or store your credit card numbers, bank account details, or other raw payment credentials. We store only a Stripe customer ID and subscription status in our database to manage your plan. Stripe's handling of your payment data is governed by Stripe's Privacy Policy.

Authentication Data

Authentication is managed by WorkOS. WorkOS processes your credentials and OAuth tokens on our behalf. Their handling of your authentication data is governed by the WorkOS Privacy Policy. Radiaq receives a user identifier and basic profile fields from WorkOS after successful authentication.

AI and Model Provider Processing

When you send a message in Radiaq, the content of that message (and any file text you attach) is forwarded to a third-party AI model provider via OpenRouter, based on the model you have selected. These providers process your message text to generate a response. We send only the conversational content — we do not send your name, email, or other account identifiers to model providers.

Radiaq is not affiliated with any AI model providers. We do not control how those providers process request data. If you have concerns about how your message content is handled by a specific model, please review the privacy policy of that model's provider.

Web Search Provider Processing

When you enable web search for a query, the search terms may be forwarded to a third-party search provider to retrieve relevant results. We do not send your account information to search providers. Web search results are used solely to augment the AI response and are not stored longer than necessary to complete your request.

Cookies and Analytics

Radiaq uses essential cookies for session management and preference storage (such as theme). We may use privacy-respecting analytics to understand aggregate usage patterns. See our Cookie Policy for full details.

3. How We Use Your Information

• To create and manage your Radiaq account
• To authenticate you and maintain your session
• To process payments and manage your subscription plan
• To generate AI responses to your messages and file queries
• To store and display your conversation history
• To send transactional emails such as password resets and billing confirmations
• To enforce daily usage limits and Terms of Service
• To understand how Radiaq is used in aggregate and improve the product

We do not sell your personal information to third parties. We do not use your conversation content to train AI models without your explicit consent.

4. How We Protect Your Information

• All data in transit is encrypted via HTTPS/TLS
• Data at rest is encrypted in our database and file storage systems
• Authentication is delegated to WorkOS, a dedicated identity provider
• Payment processing is fully handled by Stripe; we never handle raw card data
• Access to user data within our team is limited to what is operationally necessary
• API keys and secrets are stored as environment variables, never in source code

5. Data Retention

We retain your account information and conversation history for as long as your account remains active. If you delete your account, we will remove your personal data from our systems within 30 days, except where we are required to retain records for legal, tax, or financial compliance purposes (such as billing records).

Uploaded files are retained until you delete them or your account is closed.

6. Your Choices and Deletion Requests

• Update your name or email from Settings → Account
• Manage data preferences from Settings → Privacy
• Delete your account from Settings → Privacy → Delete Account
• Request a copy or deletion of your data by emailing us at hello@radiaq.com
• Control cookie preferences through your browser settings

7. Contact

For privacy questions, data requests, or concerns, contact us at hello@radiaq.com.