Privacy Policy & GDPR

Last updated: April 4, 2026

1. Who We Are

Claude Accord is a human-AI collaboration platform operated by Claudiu Cornea. We provide courses, tools, and a protocol framework for working with AI. Our infrastructure is hosted within the EU (Ireland) via Supabase and Vercel.

2. What Data We Collect

We collect the minimum data necessary to provide our service:

Account data: Email address, encrypted password, display name, and profile information you choose to provide (via Supabase Auth).
Collaboration data: Your trust level, protocol level, course completions, and session history with Claude — stored to maintain continuity across conversations.
Context data: Observations, competencies, and preferences that Claude records during sessions — always visible to you and deletable on request.
Contact form data: Name, email, and message content when you contact us.

We do not collect analytics, tracking cookies, or any third-party advertising data.

3. Why We Collect It (Legal Basis)

Contract performance: To create and manage your account and provide the collaboration service (Art. 6(1)(b) GDPR).
Legitimate interest: To respond to your inquiries and improve the protocol (Art. 6(1)(f) GDPR).
Consent: To store collaboration context and send you updates (Art. 6(1)(a) GDPR).

4. Where Data Is Stored

All data is stored on Supabase servers in the EU (AWS eu-west-1, Ireland). The website is served via Vercel (edge network). No personal data is transferred outside the EU/EEA for storage.

5. Data Retention

We keep your data only as long as your account is active. Your collaboration context (Claude's notes about you) persists across sessions by design — this is the core of the service. You can request full deletion at any time.

6. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

Access — Request a copy of your personal data, including all collaboration context.
Rectification — Correct inaccurate data.
Erasure — Request deletion of your data ("right to be forgotten"), including all collaboration history.
Portability — Receive your data in a machine-readable format.
Object — Object to processing based on legitimate interest.
Withdraw consent — Unsubscribe from emails or request context deletion at any time.

7. How to Exercise Your Rights

8. Cookies

We use only essential cookies required for authentication (Supabase session tokens). No tracking or advertising cookies are used.

9. Third-Party Services

Supabase — Database, authentication, and MCP server infrastructure (EU-hosted). Supabase Privacy Policy.
Vercel — Website hosting and deployment. Vercel Privacy Policy.
Anthropic (Claude) — AI model provider. Conversations processed via Claude are subject to Anthropic's Privacy Policy.

10. MCP Server & AI Context

When you connect via MCP (Model Context Protocol), Claude accesses your collaboration context — trust level, protocol, notes, and preferences. This data is used solely to personalise your experience. Claude does not share this data with other users or services.

11. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.