This Privacy Policy explains what information Cassandra collects when you use it, how we use it, who we share it with, and what choices you have. Cassandra is an AI chat service operated by Unaded (unaded.com). By using Cassandra, you agree to the practices described here.
This policy covers Cassandra only. If you use our radiology tools (image search, report/impression/protocol generators, the Desktop Companion), those are governed separately. This document is the source of truth for Cassandra. If anything elsewhere on the site contradicts it, this document governs.
The table below covers every category of information Cassandra collects.
We have the technical capability to collect each of these. We choose not to. Collecting any of them would require a material change to this policy.
No analytics pixels, no retargeting beacons, no ad networks on any Cassandra page.
We do not sell, license, or transfer your data to data brokers, advertisers, or any other party for commercial gain.
Our session cookie is scoped to unaded.com only. We do not track you across other websites.
We see only what you deliberately type into Cassandra’s input field and submit. Nothing else.
Cassandra does not capture, record, or transmit anything visible on your screen beyond what you paste into the chat.
Our payment processor handles all card data. We never see, store, or process card numbers or CVCs.
We do not use your chat messages to train any AI model. The systems we use to generate replies also do not use your inputs to train their models, per their current data-use terms.
A handful of external service categories touch user data during normal Cassandra operation. We choose providers carefully and limit what each one receives to only what’s needed to perform its function.
Every message you send is passed to the systems that generate replies. They never see your IP address directly — only the message content reaches them through our server. Per their current data-use policy: inputs are not used to train models, and are retained for up to 30 days for abuse-monitoring, then deleted.
When you purchase credits, you are redirected to a secure hosted checkout page. Our payment processor handles all card data under PCI-compliant infrastructure. We receive only a cryptographically signed confirmation containing the session ID, amount, and email you provided. We verify that signature before granting any credits.
Our hosting provider stores our database and files, including all data described in this policy. They have infrastructure-level access to server logs and the database. They are not contracted as a HIPAA Business Associate and do not receive PHI by design.
When a query is logged, the sending IP is looked up through a location-lookup service to derive an approximate country, region, and city for the admin analytics dashboard. The lookup is anonymous (no query content is transmitted), rate-limited, and the result is cached on our server for 30 days so the same IP is only looked up once per month.
Cassandra pages load web fonts based on the font family you pick in Settings. No query content is sent as part of loading these fonts.
You type a message and send → Cassandra sends it (plus conversation history and any attachments) to our server, authenticated as you (logged-in users) or by session cookie (guests) → our server checks your credit balance → if balance allows, our server opens a streaming connection to generate a reply → a reply streams back token-by-token → our server relays those tokens to your browser as they arrive → Cassandra renders the final reply once the stream completes → message and reply are logged in our own query log, saved to your browser’s local storage, and (for logged-in users) synced to your account.
Your browser never talks directly to the systems that generate replies. They never see your IP address, browser, or device information.
You click Buy Credits → Cassandra attaches an internal reference identifying your account or guest session to the checkout link → you’re redirected to a secure hosted checkout page → you pay → our payment processor sends a signed confirmation to our server once the payment completes → our server verifies that signature → credits are added to your balance → the usage widget updates on the next page refresh.
cassandra_chats_v1 (localStorage) — your full conversation history: messages, titles, timestamps, starred status, per-reply cost figures. Private to your device (also mirrored in your account data if logged in).cassandra_theme_v1 (localStorage) — your light/dark theme preference.cassandra_font_scale_v1 (localStorage) — your font-size preference (85%–120%).cassandra_font_family_v1 (localStorage) — your font choice (Inter, System UI, DM Sans, Serif, or Mono).cassandra_bg_variant_v1 (localStorage) — your light-mode background variant (white, blue tint, cool grey, warm grey, or solarized).Not a cookie: the “client fingerprint” described in Section 1 is computed server-side from your request headers and never stored on your device. There is nothing for you to clear locally.
All the browser-stored items above can be cleared by clearing site data for unaded.com in your browser settings. Clearing cassandra_chats_v1 removes your local chat history permanently (though logged-in users can still recover it from server-side sync). Clearing the guest session cookie removes your guest session — if you have purchased credits and no claim link was saved, those credits may become inaccessible via cookie alone, but our fingerprint lookup will typically reunite you with your balance from the same browser/device.
Query log rows are retained indefinitely. Request deletion by emailing us. Deleting your account triggers deletion of associated logs within 30 days.
Persists in localStorage until you clear it. Logged-in users additionally have a server-side mirror (up to 4 MB), which is deleted when the account is deleted.
Auto-deleted from our server after 1 day by a scheduled task. The systems that generate replies retain inputs for up to 30 days then delete them.
Retained while your account is active. Deleted within 30 days of account deletion, except financial records required for compliance (typically 7 years).
Our payment processor retains payment records per its own policy. We retain the session ID and amount for billing reconciliation.
Retained in our database while the session has a non-zero balance. Contain only a session ID, credit balance, and the client fingerprint hash — no name, email, or other personal identifiers.
Country / region / city results are cached per unique IP for 30 days, then discarded if not renewed.
.php, .py, .sh, etc.). Even if a malicious file is uploaded, the server will never run it.We have not undergone a SOC 2 audit. We are not contracted as a HIPAA Business Associate and do not execute BAAs. Cassandra is designed to operate outside the BAA pathway by not knowingly processing PHI.
To report a security issue, email admin@unaded.com with subject line Security.
Regardless of where you are, you may exercise the following rights. We do not condition access to Cassandra on waiving any of them.
Request a copy of data we hold — account info, chat logs, credit history, query logs. Email admin@unaded.com with subject Data Access.
Request deletion of your account, chat logs, or guest credit records. Processed within 30 days. Financial records required by law are excluded.
If we hold incorrect information (e.g. wrong email), let us know and we’ll correct it.
Stop using Cassandra at any time. Clear site data for unaded.com in your browser to remove local history. Contact us to delete your account.
Right to know what is collected (Section 1), right to know it is not sold (Section 2), right to non-discrimination for exercising these rights.
Lawful basis: legitimate interest (logs, fraud prevention) and your explicit request (AI queries, payments). Additional rights: portability, complaint to supervisory authority.
We may update this policy when Cassandra changes. Material changes will be noted at the top of this page and, for account holders, communicated by email. The “Last updated” date above reflects the most recent revision. Continued use after a change constitutes acceptance.
Children. Cassandra is intended for users 18 or older. We do not knowingly collect data from anyone under 18.
International transfers. Unaded is operated from the United States. The service providers we rely on may process data in multiple jurisdictions. Where required by EU/UK law, transfers rely on Standard Contractual Clauses with our subprocessors.
For privacy questions, data access/deletion requests, or security disclosures:
Use subject lines Data Access, Data Deletion, or Security for faster routing. We reply within 2 business days. Data requests are processed within 30 days.