Privacy notice

Barlas.ai is provided by Summairist.

Paid service availability is checked at runtime. Sign in to check your account access; manual tools and file downloads remain free.

Accounts and saved work

We use Supabase for account authentication and database storage. Account information and session cookies support sign-in and access checks. If you choose Summairist sign-in, that service verifies your source account and exchanges its session for a Barlas session.

Saved project records, snapshots, versions, ownership and workspace membership information support persistence and access. Settings, consent choices, connection grants, activity and action records support app features and recovery. Access to shared work follows workspace permissions. Some builder drafts and device copies use browser local storage; exported files remain wherever you save them.

AI context you approve

When enabled, optional AI Q&A sends your approved question and selected context through OpenRouter to the configured model provider, currently OpenAI. Context can include selected records or pasted material and project, revision and selection details. Answers may quote that material. Review what you select before approving the request; you can choose not to submit it.

Answers are retained for recovery. Model and generation identifiers, request hashes, costs, outcomes and timestamps also support billing and reconciliation. Where enabled with separate app consent, semantic search uses a Supabase embedding model and stores record chunks and embeddings for search.

Provider handling depends on the service and its applicable settings and terms. See OpenRouter’s privacy policy and OpenAI’s business and API privacy information. These links do not establish a Barlas-specific no-training, zero-retention or data-residency guarantee.

Payments, hosting and support

When payments are enabled, Stripe hosts card entry and receives payment amounts and top-up/account references. Barlas keeps payment references, credit entries, reservations and billing records for account balances and reconciliation. The checkout request does not send project content or AI questions to Stripe.

Vercel hosts the application. Hosting, authentication, database and payment services can process technical request information and operational logs. Support receives the information you send by email. See the official privacy documents for Supabase, Stripe and Vercel.

Recovery, retention and your choices

Ordinary retained AI answers have a seven-day recovery access window. Expired output is cleaned up when the relevant recovery or settlement path runs; this is not an all-copy deletion deadline. Answers saved into workspaces, billing and activity records, separate verification records, provider copies, logs and backups do not share that recovery window.

Archiving retains saved content and versions and continues storage charges while funded. Permanently deleting a saved project removes its content and all retained versions from active storage and stops their future storage charges. The payer’s storage minimum stops when no projects remain. Individual older versions cannot be removed separately. Payment and billing audit records remain; this action does not immediately erase separate provider copies, logs or backups. Removing a browser copy does not remove cloud copies or downloaded files.

Under the current retention policy, saved work is not automatically deleted solely because the balance reaches zero. This is not indefinite retention. Recovery and export remain subject to account and workspace access rights. See saved work and recovery.

You can review selected AI material, storage acceptance and available connection or consent controls before use. For questions or requests about access, correction or deletion, email demir@summairist.com. We may need to verify your authority for the affected account or workspace. There is no complete self-service account-erasure process; contacting support does not immediately erase all records or provider copies. Do not email passwords, API keys, full card details or sensitive app data.