Private preview and explicit sharing

Private work stays
with you.

Import reads a minimized story draft JSON into browser memory. It does not upload the file, persist it in browser storage, or create a server draft. Clearing the preview or reloading removes that in-memory draft.

Publication happens only after you confirm an exact locally approved export and its purposes. The server repeats deterministic and configured semantic review before storing the approved public story. Failed submissions are not stored as drafts. Semantic review sends only the minimized story draft and any controlled capability summary to the configured model provider; email, codes and source work are excluded.

Sign-in email and retention

Authentication uses your chosen email and a six-digit code. Better Loop stores your email in its identity service, separate from contribution content. The browser receives an opaque HttpOnly session cookie; encrypted provider tokens stay in server session records. A fresh verified code revokes older browser sessions.

Resend is our selected provider for production sign-in email. When delivery is enabled, Better Loop sends Resend the recipient email address and a message containing the sign-in code. Local evidence and public contributions are not sent to Resend. Open and click tracking are disabled for our sending domain.

Resend documents 30-day retention of email bodies and metadata on its Free, Pro and Scale plans. This includes the message containing your sign-in code. The code expires after ten minutes; expiry does not erase the retained message. Better Loop does not promise immediate deletion of provider-held messages.

Local coaching and optional sharing

Local coaching may use your configured model provider. That is a separate processing boundary from Better Loop and must be reviewed before selecting evidence. Schema validation and a digest establish structure and content identity, not confidentiality.

Public display, benchmark aggregation, automated community learning and role-relevant evidence discovery are separate purposes. All optional choices start off. Earlier-format records are never automatically opted into discovery. Model training remains off. Discovery exposes supporting public evidence and gaps, never your contact email or a hiring decision.

Withdrawal and deletion

Withdrawal removes the public story, search entry, profile summary, recommendation and role-discovery eligibility, reactions and reports in one local transaction. This app serves these surfaces without persistent application caches. You can also revoke an optional purpose immediately while retaining the public story. Owner history keeps exact submitted content and purposes, with separate revocation metadata. Deletion additionally removes stored story and capability versions and consent content. A minimal retry receipt remains so a delayed retry cannot recreate deleted content.

Local session lifetime is at most seven days with a 24-hour idle limit. Request counters use hashed identifiers, with a 24-hour cleanup horizon. Retry receipts have a 30-day maintenance horizon. These are local implementation targets. The base production database is installed and backed up; provider-wide backup retention has not been accepted. No third-party deletion guarantee is claimed. External copies cannot be recalled.

Contact Better Loop

For support, privacy questions or deletion requests, email our monitored contact at yixiao@intelligenceagents.ai.