Privacy

What we receive from Google

You sign in with Google. We ask Google for your email address only (the "openid email" permission), and Google confirms that the address is verified. We never see your Google password.

We use the address for two things: to check it is on the invite list, and to label your own worlds and runs so only you (and the demo's admins) can see them.

What we store

• The invite list: your email address, your role (viewer or admin), who invited you and when, when your access expires, and when you last signed in.
• Your worlds and runs: the worlds you save (up to 20) and the simulation runs you start, with their reports and replays. Your 5 newest finished runs are always kept; older runs are removed automatically to make room (the site keeps about 40 runs in total).
• The access log: every change to the invite list (added, extended, revoked) and every time an admin opens someone's work - who, what and when. Admins see your work read-only, and the page says so.
• The sign-in log: each sign-in, with its time, your email address and your IP address. It is capped in size and the oldest entries are overwritten.

All simulation data - patients, prescriptions, pharmacies, companies - is synthetic. No real patients, pharmacies or companies are used.

What we do not do

• We do not sell, rent or share your information.
• We show no advertising and use no analytics or tracking.
• We do not use your information, or anything you do in the demo, to train AI. The demo's AI features run inside the demo; nothing you do is sent to an outside AI service.
• No page loads anything from another company's servers. The only outside service is Google, for sign-in.

Where it is hosted and how it is protected

• Hosted on Amazon Web Services (AWS) in the United States (Ohio region).
• HTTPS only. The site's certificates come from Let's Encrypt.
• Invite-only: every page checks that you are signed in and still on the invite list, on every request. Expired or revoked access stops at the next click.
• The sign-in cookie cannot be read by page scripts and is only sent over HTTPS (see Cookies).
• Access changes and admin views are logged (above).

How long we keep it

• Invite-list entries stay until an admin removes them or they expire.
• Runs: your 5 newest finished runs are kept; older ones are removed automatically.
• The sign-in log is size-capped; old entries are overwritten.

A copy, or deletion

To get a copy of what we hold about you, or to have it deleted, write to privacy@bytes4ai.com from the address you were invited with.

Who runs Tejas

Tejas is operated by Ravindra Pratap Singh under the Bytes4AI brand. Contact: privacy@bytes4ai.com.

This page describes our practices. It is not a statement of compliance with any law or standard.