Site policies
Privacy & data
Last updated: October 3, 2026. This page describes the data handling implemented in the current pre-launch service. Please review it before sharing sensitive information.
Agency enquiries
When you contact InMillhouse, we store the name, email address, optional organisation and service of interest, and message you submit so that we can consider your enquiry. Do not submit confidential documents or sensitive personal information through this form. An enquiry does not itself establish a professional engagement.
Data we handle
If you create an account, the authentication provider (Supabase) processes your email, password credentials and sign-in session. Passwords are not stored in our research history. Research questions, conversation context and selected archive names are sent to our server for search and AI analysis. Cited document text and generated responses may be retained in your research history.
Where research goes
Search terms and public archive pages are processed through Firecrawl via Lovable’s connector gateway. Questions, recent conversation context and retrieved document text are processed by an AI model through Lovable’s AI gateway to generate answers and summaries. The AI request is configured with storage disabled, but external providers may process data under their own policies. Do not enter confidential, classified or personal information that you do not wish to send to these providers.
Storage and access
With your permission, guest research history is stored in this browser (up to 30 recent sessions). Account history is saved in Supabase and access to saved sessions is restricted to your signed-in account. If you sign in while permitted guest history is present, it is moved into your account. A guest identifier in essential browser storage and a cookie supports guest access; service usage events may record that identifier or an account identifier. We do not currently use advertising trackers.
Controls and retention
You can remove individual saved inquiries in History. Choose “Essential only” in Privacy choices to remove local guest history and prevent future local history saving. Account history remains until you delete sessions. A self-service account deletion tool is not yet available; contact the site operator for account deletion or data requests before using this as a permanent archive. Usage records may remain for operational purposes. Avoid relying on this app as your only copy of research.
Policy updates
We will update this page when data flows, retention or payment features change. This policy is an operational description, not a substitute for jurisdiction-specific legal advice. See our User Agreement and Research Policy.