Privacy Policy

CAST (“CAST”, “we”, “us”) is a demonstration chat interface for exploring capability ablation in language models. This policy explains what data we handle when you use the app.

Information we handle

• Conversations. The prompts you send and the model responses you receive. Depending on configuration, conversations are stored either locally in your browser (on-device) or in our database, associated with your account.
• Account information. If sign-in is enabled, authentication is handled by our identity provider (Clerk). We receive a user identifier and the basic profile details you provide there (such as your email address).
• Model requests. To generate a response, your messages are forwarded through our server to the configured model endpoint. Our server adds the endpoint credentials; those credentials are never exposed to your browser.

How we use it

We use this information solely to operate the app: to generate responses, show your conversation history, and, when you choose, to share a conversation by link. We do not sell your data or use your conversations for advertising.

Shared conversations

If you share a conversation, anyone with the link can view a read-only copy and continue their own copy. The link remains active until you revoke it (“Stop sharing”), after which it stops resolving.

Retention and deletion

Conversations persist until you delete them. On-device history is stored in your browser and can be cleared at any time; account history can be deleted from the app.

Analytics

We use Microsoft Clarity to understand how the demo is used. It records how you interact with the page, including clicks, scrolling and general usage patterns, and reconstructs those sessions so we can see where the interface confuses people. It also collects the usual technical details a website receives, such as your browser, device and approximate location from your IP address. Anything you type into the chat is part of the page, so treat what you send here as recorded.

Microsoft uses this data under its own terms, and you can opt out through its browser-level controls or by blocking the script.

Third parties

We rely on service providers to run the app, including our hosting provider, our identity provider for authentication, Microsoft Clarity for analytics, and the operator of the model endpoint that processes your prompts. Your prompts are subject to the model operator’s own handling.

Contact

Questions about this policy can be directed to the team operating this deployment.

CAST is a demonstration application. This policy is provided as a template and should be reviewed by legal counsel before any production or public use.