Privacy Notice
In short: we keep your email, a scrambled version of your password, and your chats so you can come back to them. We don't sell your data, show ads, or send your chats to any AI company. You can delete any chat, or your whole account, at any time.
Who runs AskLaurier
AskLaurier is an independent student project. It is not operated by, endorsed by, or connected to Wilfrid Laurier University, and Laurier does not receive your information from us. Questions about this notice can go to drewscode0@gmail.com.
What we collect
- Your email address, to create and sign in to your account.
- Your password, stored only as a salted, one-way hash. We cannot read it or send it to you.
- If you choose “Continue with Google”: Google confirms who you are and passes your email address and basic profile details (such as your name and picture) to our sign-in provider, Supabase. AskLaurier itself uses only your email address. We never see your Google password.
- Your chats: the messages you send, the answers you get, a title taken from the first message, and the times.
- A sign-in cookie, so the site remembers you are signed in (see below).
We do not ask for your student number, date of birth, or address, and you should not type them, or passwords, health details, or other sensitive information, into the chat.
How we use it
- To let you sign in and see your saved chats.
- To answer your questions.
- To keep the service secure, for example by limiting repeated failed sign-in attempts.
- To improve the service: the owner may review questions the assistant could not answer, so that more information can be added. We do not publish chats or identify you when doing this.
Where your questions go
AskLaurier answers using its own model, Hawk-1, together with its own notes. Your messages are not sent to ChatGPT, Claude, or any other outside AI service.
Who can access your data
- The site owner can technically access the database.
- Our service providers store and host the data on our behalf: the database provider (Supabase) and the company that hosts the website. They process it only to run the service.
- We do not sell your data, use it for advertising, or share it with Laurier.
- We may disclose information if the law requires it.
Cookies
We use one cookie, asklaurier_session, which keeps you signed in for up to 30 days or until you sign out.
During a Google sign-in we also set a second cookie, asklaurier_oauth, for up to ten minutes so the sign-in can finish safely.
Both are essential for the site to work. We do not use advertising or analytics cookies, and the pages load no third-party trackers.
How long we keep it
Your account and chats are kept until you delete them. Deleting a chat removes it from our database. Deleting your account removes your email, password hash, sign-in sessions, and all of your chats. Backups kept by our database provider may hold copies for a short additional period before they are overwritten.
Your choices
- Delete a chat with the × next to it in the sidebar.
- Delete your account with "Delete account" in the sidebar.
- Ask to see or correct your information by contacting drewscode0@gmail.com.
Security
Passwords are hashed with a salt, sign-in cookies are marked HttpOnly, and the site is served over HTTPS. No online service is perfectly secure, so please choose a password you don't use elsewhere.
Changes
If we change this notice in a way that matters, we will update the date above and, where possible, tell signed-in users.