Privacy Policy

Effective October 23, 2026.

Kameron Tanseli ("we", "us", or "our") provides A/BLint, the A/B test linter for AI assistants. This Privacy Policy describes how we handle personal information we collect through the A/BLint website at explint.com, the A/BLint workspace, and the A/BLint MCP server (together, the "Service").

California residents: see the State privacy rights notice below for important information about your rights. Users in the European Economic Area should read the notice to European users, and users in the United Kingdom should read the notice to UK users.

1. Personal information we collect

Information you provide to us

• Account data, such as your name, email address, and the password you set to sign in. Accounts are held by Appwrite, our account and hosting provider.
• Organization data, such as the name you give your organization and the names and email addresses of the members you invite to it.
• Your content, such as the projects, rules, and experiment specs you submit for linting, and the lint findings the Service generates from them.
• Transactional data, such as credit purchases and order numbers. Card and bank details are collected and processed directly by our payment processor, Polar, and we never see them.
• Communications data, based on our exchanges with you when you email us or ask for support.

Information collected automatically

• Device and log data, such as your IP address, browser type, operating system, the pages you view, and access times, recorded by our servers and by Appwrite when you use the Service.
• Usage data, such as the lint requests your organization makes, when they are made, and how each spec scored against your rules. The workspace reads this to show your usage and quality charts.

Information from third parties

• Payment confirmations from Polar when a credit purchase completes.
• AI model responses from OpenRouter, the AI model provider that answers your lint requests.

2. Tracking technologies and AI processing

Some automatic collection happens through cookies and similar technologies, and our use of them is limited to what the Service needs to run. Our Cookie Policy describes what they are and how to control them.

AI processing

The Service lints specs with AI models. When you submit a spec for linting, the spec and your project's rules are sent to OpenRouter, which routes them to the model that answers the request, and the findings come back to the Service. We do not use your content to train AI models, and we do not permit our AI providers to use it for that purpose.

3. How we use your personal information

We use personal information for the purposes below, or as otherwise described when we collect it:

• Service delivery: to provide the Service, maintain your account and organization, answer lint requests, record usage, and send service messages such as security alerts and billing receipts.
• Support: to respond to your questions and feedback.
• Security and protection: to enforce our terms, prevent fraud and abuse, and protect the rights and safety of our users and the Service.
• Improvement: to understand how the Service is used and to develop new features, working from aggregated and de-identified data wherever possible.
• Compliance: to comply with legal obligations and lawful requests.

Legal bases for UK and European users

Where UK or European data protection law applies, we rely on these legal bases: performance of our contract with you when we provide the Service; our legitimate interests in securing and improving the Service and in protecting our rights and those of our users, balanced against your rights; your consent, where we ask for it; and compliance with legal obligations.

4. How we share your personal information

We share personal information with the following parties:

• Service providers that help us operate the Service: Appwrite for accounts, database and hosting, OpenRouter for AI model access, and Polar for payments. Each may process personal information only to provide its service to us.
• Other members of your organization, who can see your name and email address and the organization's projects, rules, and lint history.
• Professional advisors, such as lawyers, auditors, and insurers, in the course of the services they render to us.
• Authorities and others, when we believe in good faith that disclosure is necessary to comply with law, respond to legal process, or protect the rights, safety, or property of us, our users, or others.
• Business transferees, in connection with an actual or prospective merger, acquisition, financing, or sale of assets.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Business customers that need processor terms can ask us for a data processing addendum, which covers the UK International Data Transfer Agreement and the EU standard contractual clauses as applicable to their use. Contact us at hello@explint.com.

5. Retention

We keep account and organization data while your account is open and delete it within 30 days of account deletion, subject to a backup window of up to 90 days. Projects, rules, specs, and lint history are kept while the project or organization exists and are deleted when you delete them. Billing and transaction records are kept for six years to meet UK tax record-keeping requirements. Where we aggregate and anonymize usage data for reporting, the anonymized data may be kept longer.

6. Your choices

• Account details: you can review and update your name and email address from the account page in your workspace.
• Account deletion: you can delete your account at any time from the account page, which removes your user record from the Service.
• Browser storage: you control cookies and browser storage in your browser settings, as the Cookie Policy describes.
• Service messages: we send messages about the Service, such as security alerts and billing receipts. We do not send marketing emails, so there is no marketing list to opt out of.

7. Security

We use technical and organizational safeguards designed to protect personal information, though no internet transmission is completely secure and we cannot guarantee absolute security.

8. International data transfers

We are established in the United Kingdom and our service providers process data in the United States, the European Union, and other countries, so your personal information may be transferred outside your country, where privacy laws may be less protective. Users in Europe and the United Kingdom should read the international transfers section below.

9. Children

The Service is not intended for anyone under 18 years of age, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we post the updated version with a new effective date, and your use of the Service after that date means you accept the updated policy.

11. State privacy rights notice

This section applies to residents of U.S. states whose privacy laws grant the rights described below. Not every right applies in every state, and we may decline a request where the law permits.

Your privacy rights

• Information about the categories of personal information we collect, the sources we collect it from, the purposes we use it for, and the third parties we disclose it to.
• Access to a copy of the personal information we have collected about you.
• Correction of inaccurate personal information.
• Deletion of personal information, subject to legal exceptions.
• Portability of your personal information.
• Appeal of our decision on any request you make.

We do not sell personal information and we do not share it for cross-context behavioral or targeted advertising, so there is nothing to opt out of on those grounds. Where the Global Privacy Control signal is recognized as a valid opt-out request, we honor it. You will not be discriminated against for exercising any of these rights.

To make a request, email us at hello@explint.com. We will verify your identity before acting on it and may ask for more detail, and an authorized agent may make a request for you with proof of your permission. We do not collect sensitive personal information as state privacy laws define it, and we do not have actual knowledge that we collect personal information from consumers under 16 years of age.

California residents

California's Shine the Light law lets residents ask for the names of third parties to whom personal information was disclosed for their direct marketing in the preceding calendar year. We made no such disclosures in the preceding calendar year, and requests can be sent to hello@explint.com.

12. Notice to European users

This section applies to individuals in the European Economic Area.Kameron Tanseli is the controller of the personal information this Privacy Policy describes and is established in the United Kingdom.

Your rights

European data protection law gives you the right to access, correct, delete, transfer, restrict, or object to our processing of your personal information, to withdraw consent where processing is based on consent, and to lodge a complaint with the data protection regulator in your country.

EU representative

Because we are established outside the European Economic Area and offer the Service there, we are appointing a representative in the EEA under Article 27 of the EU General Data Protection Regulation. Until that appointment is complete, EEA users can exercise their rights through us directly at hello@explint.com, and this notice will be updated with the representative's contact details once appointed.

13. Notice to UK users

This section applies to individuals in the United Kingdom.Kameron Tanseli is the controller of the personal information this Privacy Policy describes and is established in the United Kingdom, so no UK representative applies.

Your rights

UK data protection law gives you the right to access, correct, delete, transfer, restrict, or object to our processing of your personal information, to withdraw consent where processing is based on consent, and to lodge a complaint with the Information Commissioner's Office at ico.org.uk.

14. International transfers

Our Appwrite project is hosted in its Frankfurt region in the European Union, while OpenRouter and Polar process data in the United States, so personal information is transferred outside the United Kingdom and the European Economic Area. Where UK personal information is transferred to the United States, we use the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. Where EEA personal information is transferred to the United States, we use the EU standard contractual clauses, supported by a transfer impact assessment. Contact us for a copy of the safeguards that apply to your information.

15. How to contact us

Questions about this Privacy Policy and requests to exercise your rights can be sent to hello@explint.com.

Adapted from a template prepared and made publicly available by General Legal, PC. It is provided for general reference purposes only and does not constitute legal advice; use of the template does not create an attorney-client relationship with General Legal.