Privacy Policy

Summary

Lightec AI (“we”) operates TeeChat and hosted services at teechat.ai. This page describes our privacy practices.

We do not store or retain the contents of your chat conversations on our servers. On the web, conversations are kept in your browser (for example IndexedDB) on this device only, auto-deleted after 7 days, and not synced across browsers or devices. Clearing site data removes them immediately. Desktop and mobile apps store chats in folders you choose on your device, unless you explicitly export or back them up yourself.

What we collect

Account identifiers (such as email or phone) when you register or sign in to hosted chat or API access.

Session metadata on successful sign-in (see below) — not your password or verification codes in operational logs.

Billing and subscription metadata if you purchase a paid plan (processed by our payment provider).

Our current releases do not include behavioral product-analytics SDKs (for example third-party usage tracking or ad trackers). If we introduce such tooling later, we will update this page and, where applicable, provide a choice.

When metrics ingest is enabled, we may store coarse aggregate counters for product and capacity planning: auto-organize folder category labels (paths assigned by the task model, not names you typed or chose manually), subscription tier bucket (for example free or pro), and UTC calendar day. These counters are not linked to your account identifier, email, or phone, and do not include message text, prompts, or replies. Chats you place in folders yourself are counted without sending those folder names (uncategorized for metrics).

Sign-in and sessions

When you sign in successfully, we store a session record that may include your client IP address and browser user-agent string so you can review active sessions and revoke access.

Failed sign-in attempts (for example, an incorrect password) are generally not logged with your account identifier or full IP address.

To reduce abuse, we apply rate limits; when those limits trigger, we may record a coarse network prefix (IPv4 /24) for a short period in security logs — not your email, phone, or chat content in those lines.

Operational logs

Production gateways emit structured operational logs for reliability and security (errors, engine connectivity, billing webhooks).

These logs use internal user IDs where needed, not your email or phone. They do not include chat message bodies or OPE ciphertext content.

Remote AI (teechat.ai)

Your chat history stays in local folders you control. When you use hosted inference, we do not operate a server-side archive of your conversations.

Messages are encrypted with OPE before they leave your client; the gateway forwards opaque envelopes and is not intended to persist chat transcripts as readable text. Only an open-source inference engine inside a TEE decrypts to run the model — not the gateway. Verify engine attestation in Settings on any client before you send.

Your choices

You control local chat data and may delete it at any time (clear browser data on web; delete folders when desktop or mobile apps are available).

When desktop apps ship, you may use local-only models without sending content to teechat.ai.

Contact privacy@teechat.ai for access, correction, or deletion requests relating to account data we hold.

Updates

Last updated: 2026-08-06.

We will post material changes on this page with an updated date before they take effect for new use of the service.