privacy
last updated · 2026-05-28
nbtx.ai is built by a small team and we try to keep the data story simple. Below is what we collect, what we don't, and how to get anything we have about you removed.
what we collect
- Chat messages. When you chat with the concierge, your messages are sent to Anthropic's Claude API and (for the voter helper fallback at /vote) to OpenAI. We retain conversation transcripts only as long as the active session and short-lived caches (typically under a week).
- Email addresses. If you share an email — for the share-with-a-friend flow, vendor signup, or by giving it to the concierge — we save it in Firestore so we can follow up.
- Approximate location. IP geolocation is used to tell whether you're a local or visitor (city/region level, not GPS). On /vote, the "find me" button asks your browser for GPS only with your explicit consent.
- Device + speed signals. Browser type, screen size, and a small speed test inform visitor quality scoring for the vendor recommendation system.
- Vendor documents. Files vendors upload (menus, flyers, PDFs) live in Google Cloud Storage. Retention is 18 months for PDFs, ~10 months for images.
what we don't collect (or don't keep)
Wait-time reports. When you report a polling-place wait, we store the minutes and a SHA-256 hash of your IP. The raw IP is never written. Hashing is salted and one-way.
Share-by-email recipient addresses. When you send voting info to a friend through
/vote, the recipient address is sent to AgentMail and not persisted on our server. Only the recipient's email domain is logged for abuse monitoring.
Share-by-SMS recipient phones. The "text" button on /vote sends a single SMS via Twilio. The recipient number is validated and discarded — we don't write it anywhere on our server.
third parties
Services we use that may see your data:
- Anthropic (Claude API) — concierge chat reasoning
- OpenAI — voter-help Q&A fallback at /vote
- Google Cloud — hosting (Cloud Run), database (Firestore), storage (Cloud Storage), Places API
- SerpAPI — web and image search
- OpenStreetMap / Nominatim — map tiles and geocoding
- open-meteo — weather forecasts
- Twilio — SMS delivery for the share-by-text button on /vote and for Get Out The Vote (GOTV — civic outreach to remind people to vote) campaigns sent by signed-in agents
- AgentMail — outbound email from agent@nbtx.ai for the share-by-email link on /vote
- SendGrid — vendor verification emails
Each of these has its own privacy policy and we send them only what we have to.
cookies and tracking
We don't set custom tracking cookies. Standard server logs (request paths, response codes, timestamps) are kept for short periods for operational reasons. No third-party advertising trackers.
your rights
You can ask us to delete anything we have about you, or to send you a copy of it. Email agent@nbtx.ai from the address you used with the subject privacy, and we'll handle it within a few days.
changes
If we change this policy materially, we'll update the date at the top of this page and post a note on the homepage. Minor wording fixes won't trigger a re-notice.
questions: agent@nbtx.ai (subject: privacy) · about