Privacy details

Last updated: September 1, 2026

Burrito Studio is the data controller for this validation tool. The tool does not require an account, legal name, partner identity, contacts, or precise location.

AI processing

Before practice begins, the product explains that your selected scenario and the messages you choose to enter are sent to OpenAI to generate the exercise, and asks for explicit consent. The application requests that OpenAI not store response application state. OpenAI does not use API inputs or outputs to train its models by default, but its default abuse-monitoring logs may retain prompts and responses for up to 30 days, unless a longer period is required by law or reasonably necessary to protect the service or others from harm.

Conversation content

Raw practice conversations are not sent to analytics and are not stored by the application by default.

Analytics

Optional Google Analytics is limited to public pages and runs only after you choose to allow it on this device. It receives only approved public-funnel events, basic device category, and sanitized campaign labels. Raw conversation text, model responses, email addresses, and HSV details are excluded. Google advertising signals remain disabled.

The validation funnel keeps only an HMAC-protected anonymous session identifier, reviewed event name, optional campaign label, and limited completion metadata. It does not store IP addresses, scenario selections, free text, or account identifiers. Burrito Studio deletes these event rows no later than 90 days after collection.

Security and rate limiting

A strictly necessary, pseudonymous practice-session cookie expires after 24 hours. Upstash stores temporary rate-limit counters derived from pseudonymous session identifiers and hashed network addresses for no longer than the applicable rate-limit window, up to 24 hours. Raw network addresses are not stored in those counters.

Waitlist requests

If you join the waitlist, the application stores your email and any optional dating-stage or interview preference you choose to share in a Neon database. These details are used only to manage the waitlist, contact people who opted into research, and send launch updates. They are not sent to analytics.

Waitlist details are retained until you ask us to delete them or, at the latest, six months after this validation study ends, unless a longer period is required by law.

Service providers

The validation tool uses Vercel for hosting, OpenAI for AI-generated practice, Neon for waitlist storage, and Upstash for abuse prevention and rate limiting. Each provider processes only the information needed for its role.

Your choices and contact

You can ask Burrito Studio to delete your waitlist request or contact us with a privacy question at support@burritostudio.net. Please email us from the address you used to join the waitlist so we can verify and complete the request.

This page does not claim zero data retention. Avoid entering names, contact details, or anything you do not want processed as part of an AI practice session.