Get Accord

Working together. Building trust.

Privacy Policy & GDPR

Last updated: September 28, 2026

1. Who We Are

Get Accord is a human-AI collaboration platform operated by Claudiu Cornea. We provide courses, tools, and a protocol framework for working with AI. Our infrastructure is hosted within the EU (Ireland) via Supabase and Vercel.

2. What Data We Collect

We collect the minimum data necessary to provide our service:

  • Account data: Email address, encrypted password, display name, and profile information you choose to provide (via Supabase Auth).
  • Collaboration data: Your trust level, protocol level, course completions, and session history with Claude. Stored so you can continue across conversations.
  • Context data: Observations, competencies, and preferences that Claude records during sessions. Always visible to you and deletable on request.
  • Contact form data: Name, email, and message content when you contact us.

We count page views with Vercel Web Analytics. It sets no cookies.

Google Analytics runs only if you accept analytics cookies. If you reject them, it never loads. We collect no advertising data.

3. Why We Collect It (Legal Basis)

  • Contract performance: To create and manage your account and provide the collaboration service (Art. 6(1)(b) GDPR).
  • Legitimate interest: To respond to your inquiries and improve the protocol (Art. 6(1)(f) GDPR).
  • Consent: To store collaboration context and send you updates (Art. 6(1)(a) GDPR). Also for Google Analytics cookies, which we set only if you accept them.

4. Where Data Is Stored

All data is stored on Supabase servers in the EU (AWS eu-west-1, Ireland). The website is served via Vercel (edge network). If you accept analytics cookies, Google keeps the visit statistics on its own servers, which may be outside the EU.

5. Data Retention

We keep your data only as long as your account is active. Your collaboration context (Claude's notes about you) persists across sessions by design. This is the core of the service. You can request full deletion at any time.

6. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

  • Access. Request a copy of your personal data, including all collaboration context.
  • Rectification. Correct inaccurate data.
  • Erasure. Request deletion of your data ("right to be forgotten"), including all collaboration history.
  • Portability. Receive your data in a machine-readable format.
  • Object. Object to processing based on legitimate interest.
  • Withdraw consent. Unsubscribe from emails or request context deletion at any time.

7. How to Exercise Your Rights

Contact us via the Contact page or email us directly. We will respond within 30 days.

8. Cookies

When you sign in, Supabase keeps your session in your browser so you stay signed in. The site cannot work without it. When you pay, Stripe may set its own cookies to prevent fraud.

Google Analytics sets its own cookies (_ga and _ga_ plus an id), but only after you accept analytics cookies. We turned off Google signals and ad personalisation in it. If you reject them, or change your mind later, we remove them.

If you arrive through a partner's link and accept cookies, we set a cookie called gaccord_ref for 60 days. It tells us which partner sent you. If you reject them, we set nothing, and we remove it if it is already there.

Your cookie choice is saved in your browser, not on our servers.

9. Third-Party Services

10. MCP Server & AI Context

When you connect via MCP (Model Context Protocol), Claude accesses your collaboration context. Trust level, protocol, notes, and preferences. This data is used solely to personalise your experience.

11. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.