← CHA Labs

Privacy Notice

Effective 16 August 2026

Draft pending legal review. This document was prepared for Cherry Hill Advisory and has not yet been reviewed by counsel. It states our intended position and we will act consistently with it, but treat it as a draft until this notice is gone.

Scope

This notice covers chalabs.ai and the CHA Labs demos served from it. It is separate from the privacy policy at cherryhilladvisory.com, which by its own terms covers that website rather than this one. Where the two differ for activity on this site, this notice governs.

What you paste into a demo

To produce your result, the text and any file you submit is sent to Anthropic, which runs the Claude models behind every demo. That transfer is the demo. There is no way to run one without it.

We do not save your submitted content to our database, and it is not used to train any model. It exists in memory for the length of the request and in the response we send back to your browser. Short-lived caching may hold a result briefly so that reloading a page does not re-run a model call.

Two carve-outs, because they are real and a blanket "we store nothing" claim would be false. The Topical Requirements Screener stores every answer you submit to it, because storing them is how your readiness report gets built and delivered. And if a request fails, a truncated error record may be written to our log, which can incidentally include a fragment of what was being processed.

What you give us on purpose

Some results are unlocked by giving your name, work email, company and role. When you do, that record is written to our database, copied to a spreadsheet in the firm’s Google Workspace, and used by our team to follow up with you. It is a business contact record, and we treat it as one.

If you tick the box asking for occasional email, your address also goes to Brevo, our mailing platform. That is the only thing the tick box does, and every message it sends carries an unsubscribe link that works. Not ticking it does not withhold your result.

If you report a bug, we keep what you wrote and the page you were on so we can fix it.

What the site collects on its own

The ordinary request information any web server receives: IP address, user agent, the page requested, and the time. It is used to keep the site up, to apply rate limits, and to count how often a demo is run. We do not run advertising trackers or third-party analytics beacons on this site, and we do not sell or rent anything to anyone.

A session cookie identifies your browser across a single visit so a demo can hold state. It is not an advertising identifier.

Who else sees it

Anthropic, PBC — runs the Claude models behind every demo. Text and files you submit are sent to Anthropic to produce your result. Anthropic does not use business API traffic to train its models.

Cloudflare, Inc. — hosts this site and stores the data described below. Cloudflare also sees the ordinary request information every web host sees.

Google LLC — holds the spreadsheet copy of lead and screener records, in the firm’s Google Workspace.

Brevo — sends email we have your permission to send, and holds the mailing list.

We may also disclose information if the law requires it, or to establish or defend a legal claim.

How long we keep it

Contact and screener records are kept while there is a business reason to and then deleted. Operational logs are kept for a short period for troubleshooting and capacity work. Submitted demo content is not retained beyond the request, subject to the two carve-outs above.

Your choices

Write to hello@cherryhilladvisory.com to ask what we hold about you, to correct it, to have it deleted, or to have us stop emailing you. Depending on where you live you may have these as legal rights, and we will honor the request either way. Unsubscribe links work immediately and do not need an email to us.

This site is not intended for children and we do not knowingly collect their information.

Where the data sits

Cherry Hill Advisory operates in the United States and the services above process data there. If you are elsewhere, submitting information means it is transferred to the United States.

Security

Traffic is encrypted in transit, access to stored records is limited to people who need it, and secrets are held outside the source code. No internet service is perfectly secure and we do not claim otherwise.

Changes and contact

If this notice changes materially the effective date changes with it. Questions go to hello@cherryhilladvisory.com.

CHA LabsTerms of UseCherry Hill Advisory

© Cherry Hill Advisory.