What we collect
If you joined the former public waitlist, we retain the email, submission time, source page, and bid-interest filters you submitted.
For an account, we store your email and authentication identifier; profile fields you choose to add; project-report orders and frozen evidence; saved lettings and report snapshots when available to you; and basic timestamps needed to operate those records.
For payments, we store Stripe customer, checkout, payment, price, status, renewal, and cancellation identifiers as applicable. Cassandri does not receive or store your full card number. Stripe processes payment details on its hosted surfaces.
Public-source data
Cassandri also processes public procurement records from government agencies, including project details, company names, bid amounts, planholder lists, and award results. Those records power the intelligence surfaces; they are not collected from your account activity.
Why we use account data
We use it to authenticate you, render your private workspace, preserve work you ask us to save, generate requested reports, administer pilot access, support billing when enabled, respond to you, prevent abuse, and maintain the service.
Cookies and tracking
Signed-in workspaces require essential session cookies so Supabase can keep you authenticated and refresh the session securely. We do not currently run advertising pixels, cross-site tracking, or behavioral advertising. Hosting and security providers may process ordinary request metadata such as IP address, browser, and logs to deliver and protect the site.
Service providers
Supabase provides authentication and the Postgres database; Vercel hosts the web application; Resend may deliver transactional email; and Stripe provides hosted checkout, one-time report payments, subscription billing, and its customer portal where applicable. Each provider processes only the data needed for its role under its own security and privacy terms.
Sharing and sale
We do not sell personal information or share it for targeted advertising. We may disclose data to the providers above, to professional advisers under confidentiality, in a business reorganization, or when valid law requires it.
Retention, access, and deletion
We retain account and workspace data while the account or pilot relationship is active and as reasonably needed for security, billing, legal, and backup purposes. Email hello@cassandri.com from the address tied to the record to request access, correction, export, or deletion. Some records may be retained where law or an active commercial agreement requires it.
Security and changes
We use access controls and row-level database policies designed to keep each account’s workspace records private. No internet service can promise absolute security. Material changes to this policy will be posted here; if a change materially affects an active paid or pilot relationship, we will use the account email when practical.
Last updated 2026-08-20. Cassandri is a pre-formation venture. Questions and privacy requests: hello@cassandri.com.