If you are an owner
Opening a space means we store, for as long as the space exists:
- Your email address, which is also how you log in.
- Your LinkedIn profile URL, as you typed it at signup. We check its shape, not that it is yours, and it is shown publicly on your space.
- Your Cognito user id: the identifier the identity pool gives your account, and what ties your handle to you.
- Your handle, and your Display Name and Bio if you write them. All three are public.
- The Raw Text you upload, kept as you uploaded it and never shown to visitors.
- What an import read out of each public repository you picked: its description, topics, languages, dates and licence, its README and the other markdown files at its root and under
docs/— never its source code and never the list of its files. That is kept as a raw text like any other, with the goal you typed for that repository and the language you chose for the import, and the article built from it names the repository it came from, publicly, so a reader can go and see whose it is. - The Articles built from it, their revisions and their status.
- Your Strikes: for each rejection, when it happened, which article it was, and the passage the validation agent flagged, quoted from your own text.
- Your Consent: which version of the terms you accepted and when.
- How many times your space and each of your articles have been loaded.
Your email address is never shown to visitors. Your handle, Display Name, Bio, LinkedIn URL and published articles are public by design: that is what a space is.
If you are a visitor
You do not have an account and we do not give you one. There is no analytics script, no advertising and no tracking cookie on any page. What is kept is:
- Views: a count per space and per article per day. A number, with nothing attached to it — not who you are, not where you came from.
- Asked Questions: every question asked of a space and the answer it was given, kept for the life of that space and shown to its owner. The question is kept as you typed it, so do not type anything into it you would not want the owner of that space to read. Nothing identifying you is stored alongside it.
- A rate-limit counter per hour, keyed on your IP address. It holds a number and nothing else, it exists to stop one address flooding the ask, it is never joined to a question or a view, and it expires and is deleted automatically once the hour it covers is over.
Who else sees this
MusubiHub runs on Amazon Web Services in Frankfurt (eu-central-1), and the writing itself is processed by DeepSeek (api.deepseek.com) and Vercel's AI Gateway (ai-gateway.vercel.sh, which passes the request to the model provider TypeSafe AI), both outside the EU. That means four things leave the EU:
- Your Raw Text and your revisions, sent to DeepSeek so an article can be written from them and checked.
- Your Raw Text and your revisions again, sent to the AI Gateway so a screening model can say whether anything in them needs checking closely. This model answers yes or no, it writes nothing, and on the plan this deployment is on the gateway keeps the request under its ordinary retention rather than discarding it.
- The content of the public repositories you import, which becomes a raw text and goes the same way: to DeepSeek, with the goal you typed for each one, so an article can be written from each repository and checked, and to the AI Gateway to be screened. Importing is you choosing to have that content read and processed by both; it is public on GitHub, but nothing here reads a repository until you pick it.
- Every question asked on an ask page, sent to the AI Gateway with the published articles of that space so the right ones can be picked, and to DeepSeek with the passages needed to write the answer.
Nothing else is sent: not your email address, not your Cognito id, not any visitor's address. Nobody else receives your data, and none of it is sold.
Erasing your data
A space is erased through DELETE /me, the erasure route: it removes the articles, their bodies, the raw text and the space index, and drops any work still in flight. A tombstone with your handle stays behind, so that nobody else takes over the URLs you published under; it carries no email address. The admin can erase a space the same way. Asked Questions live in the space and go with it.
The dashboard button that calls that route is still being built. Until it is there — and for anything else on this page, including a copy of what is stored about you — write to whoever runs this deployment of MusubiHub.
When this notice changes
This notice carries a version, the same one as the Terms. When either page changes, the version changes, and you are asked to accept it again before you publish anything else.