Privacy

The short version

Chimeby reads public threads on your behalf, writes you drafts, and keeps a record of what you posted. Source text for saved conversations is kept for up to 90 days from when the conversation was added. Other discovery text expires after 47 hours. Backup snapshots follow the separate schedule below. Your own drafts and replies are kept for 24 months, or until you delete your organisation, whichever comes first. Email digests can include conversation titles and links, but not post bodies, comment bodies or draft text. Thread, draft and reply text is excluded from analytics and application logs.

Chimeby does not sell anything about you, and there is nobody it would sell it to.

What Chimeby keeps about you

• ·Your name and email address, so you can sign in and be invited.
• ·Your organisation, your plan and your billing status. The card itself is Stripe's, not Chimeby's.
• ·Your projects: what you sell, its address, the words you listen for and the communities you watch.
• ·Legacy connected-account records can include a username, account age, comment karma and an encrypted read-only token. The separate Chimeby-operated publishing accounts store identity details and use private signed-in browser profiles; identity-only account verification discards its temporary token.
• ·Your drafts, your published replies and what happened to each one afterwards.
• ·A record of privileged actions, such as changing a limit or deleting something, so an account owner can see who did what.

Other people's words

This is the part most products are vague about, so here it is plainly.

Saved conversations in Good fits, with drafts, or with recorded replies retain their source post or comment text for up to 90 days from when the conversation was added. Unselected discovery text, cached surrounding comments and quoted evidence keep their 47-hour expiry. Cleanup runs on a 15-minute schedule. Opening expired content may fetch it again. Backup retention is separate.

If a platform tells Chimeby a post or comment has been deleted, it goes immediately rather than waiting for its retention period to end. Background checks update edited content and remove confirmed deletions where a live checker is configured. Unavailable checks do not prove that content is unchanged.

Links, identifiers and Chimeby's scores can remain after the source text expires. Stored quotations expire too. Screens show when source text is unavailable.

Email digests carry conversation titles and links, but not post or comment bodies. Source text is excluded from analytics and application logs.

Your drafts and your replies

Drafts and published replies are yours, so they are kept for 24 months, or until you delete your organisation, whichever comes first. They are what makes the safety check work: Chimeby cannot tell you that one reply in ten of yours names your product without a record of the ten.

A draft is never reused for anybody else, and Chimeby checks a new draft against what has already been posted precisely so that two customers never sound like the same person.

Who else touches it

Chimeby is a small product built on other people's services. These are all of them, and what each one does.

Anthropic

Reads a thread and writes the first version of a reply. Threads and drafts are sent, and are not used to train anything.

Voyage AI

Turns a thread into numbers so Chimeby can tell, cheaply, whether it is close enough to what you sell to be worth reading properly.

Neon

Holds the database. Everything Chimeby knows lives here.

Vercel

Runs the website and the pages you are reading.

Clerk

Signs you in with a link sent to your email, and holds your email address.

Stripe

Takes payment and works out tax. Chimeby never sees or stores your card.

Resend

Sends email: the digest, invitations, receipts and anything that has gone wrong.

Google Analytics

Measures visits, traffic sources and active visitors using browser cookies. Advertising features are disabled. It receives named screens and public campaign labels, not conversation text, account names or email addresses.

PostHog

Counts how the product is used. It receives identifiers, labels and numbers, and never any thread, draft or reply text.

Upstash

Calls Chimeby on a schedule to start its work, such as the checks every 15 minutes. It receives no thread, draft or reply text.

Fly.io

Runs that same scheduled work when Chimeby outgrows Upstash.

Backblaze

Keeps the backups of the database.

This list changes as the product changes. When one is added or swapped, this page is updated and every account owner is emailed 30 days before the new one starts handling anything, so there is time to ask about it or to leave.

What is measured

Chimeby counts how the product is used so it can tell which parts work. Every event carries identifiers, labels and numbers, and nothing else: which organisation, which project, which plan, which source, which safety rule stopped a reply. Never a title, never a draft, never a reply. A check runs on every build and fails it if any text field is added to an event.

Google Analytics starts automatically and uses analytics cookies to measure visits. Previously saved opt-outs remain respected. You can also restrict analytics cookies through your browser settings. Google Analytics receives named screens, referring website origins and public campaign labels, but no conversation text or private URL parameters.

Reddit, Hacker News and X

Discovery reads public conversations. Account linking does not request posting, editing, voting or messaging permissions, and stored OAuth grants cannot carry them. Managed publishing is a separate browser workflow that can submit a customer-approved reply through a Chimeby-operated account. The trust page explains the distinction.

OAuth grants can be revoked through Reddit. Managed publishing uses separate browser sessions; revoking an OAuth grant does not sign those sessions out.

Getting it back, and having it deleted

• ·Export: write to privacy@chimeby.com and everything your workspace holds comes back as JSON and as CSV inside 30 days.
• ·Delete: write to privacy@chimeby.com from the owner's address to request deletion. The workspace has a 30-day cancellation period before its live records are deleted. Backup snapshots expire separately on a rolling 30-day schedule; they are not erased at the same time as the live records.
• ·Correct: anything wrong can be changed in Settings, or ask and it will be changed for you.

Deleting an organisation removes its projects, conversations, drafts, replies, connected accounts and tokens. Stripe keeps invoice records for tax and accounting. Chimeby also keeps a hash of the owner's email address to prevent repeated free trials.

Who is responsible

Chimeby is run by its founder, who is the person responsible for everything on this page and the one who answers privacy@chimeby.com. You will hear back inside one working day, and export requests are answered inside 30 days. Deletion follows the live-record and backup schedule described above.

If you would rather have a signed data processing agreement, ask at the same address and one will be sent.

Changes to this page

When this page changes, the date at the top changes with it. A change that affects what is kept, for how long, or who else touches it is emailed to every account owner 30 days before it takes effect.