Privacy Notice
Effective 16 August 2026
Scope
This notice covers chalabs.ai and the CHA Labs demos served from it. It is separate from the privacy policy at cherryhilladvisory.com, which by its own terms covers that website rather than this one. Where the two differ for activity on this site, this notice governs.
What you paste into a demo
To produce your result, the text and any file you submit is sent to Anthropic, which runs the Claude models behind every demo. That transfer is the demo. There is no way to run one without it.
We do not save your submitted content to our database, and it is not used to train any model. It exists in memory for the length of the request and in the response we send back to your browser. Short-lived caching may hold a result briefly so that reloading a page does not re-run a model call.
Two carve-outs, because they are real and a blanket "we store nothing" claim would be false. The Topical Requirements Screener stores every answer you submit to it, because storing them is how your readiness report gets built and delivered. And if a request fails, a truncated error record may be written to our log, which can incidentally include a fragment of what was being processed.
What you give us on purpose
Some results are unlocked by giving your name, work email, company and role. When you do, that record is written to our database and used by our team to follow up with you. It is a business contact record, and we treat it as one.
Unlocking a demo also adds your address to our mailing list, which is held by Brevo. This is not an optional extra you can decline and still unlock: the arcade gate says in print, above the button, that unlocking opts you in, and the Quality Assessment Manual visualizer asks you to confirm it with a tick box before it will proceed. Every message carries an unsubscribe link that works immediately, and unsubscribing takes nothing away from what you have already unlocked.
The Topical Requirements Screener is different. It does not add you to the mailing list; it creates a sales record in monday.com so our team can follow up on the report you were sent.
If you report a bug, we keep what you wrote and the page you were on so we can fix it.
What the site collects on its own
The ordinary request information any web server receives: IP address, user agent, the page requested, and the time. It is used to keep the site up, to apply rate limits, and to count how often a demo is run.
We also run Google Analytics 4 on the public pages. It sets its own cookies and reports page views, referrer, approximate location from your IP address, and rough device and browser details to Google, so we can see which demos people find and use. We do not send it your name, your email or anything you typed into a demo, we do not run advertising or remarketing tags, and we do not sell or rent anything to anyone. Google explains what it does with the data at policies.google.com/privacy, and browser settings or the Google Analytics opt-out add-on will stop it.
The Screener page additionally loads Google reCAPTCHA to tell a person from a script, and every page loads its fonts from Google. Both of those mean Google sees the request even before you interact with anything.
A session cookie identifies your browser across a single visit so a demo can hold state. It is not an advertising identifier.
Who else sees it
Anthropic, PBC: runs the Claude models behind every demo. Text and files you submit are sent to Anthropic to produce your result. Anthropic does not use business API traffic to train its models.
Cloudflare, Inc.: hosts this site and stores the data described below. Cloudflare also sees the ordinary request information every web host sees.
Google LLC: receives your IP address and browser details on every page, through Google Analytics, the web fonts these pages load, and the reCAPTCHA check that protects the Screener form. See Google’s privacy policy at policies.google.com/privacy.
Brevo: sends the occasional email you opt into by unlocking a demo, and holds that mailing list.
monday.com: holds Screener submissions as sales pipeline records, so our team can follow up on the report you were sent.
We may also disclose information if the law requires it, or to establish or defend a legal claim.
How long we keep it
Contact and screener records are kept while there is a business reason to and then deleted, and you can ask us to delete yours at any time using the address below.
Operational logs, meaning which demo was run, how long it took, whether it failed, and truncated error records, are deleted automatically 90 days after they are written. A scheduled job does the deleting; it is not a manual promise.
Submitted demo content is not retained beyond the request, subject to the two carve-outs above.
Your choices
Write to hello@cherryhilladvisory.com to ask what we hold about you, to correct it, to have it deleted, or to have us stop emailing you. Depending on where you live you may have these as legal rights, and we will honor the request either way. Unsubscribe links work immediately and do not need an email to us.
This site is not intended for children and we do not knowingly collect their information.
Where the data sits
Cherry Hill Advisory operates in the United States and the services above process data there. If you are elsewhere, submitting information means it is transferred to the United States.
Security
Traffic is encrypted in transit, access to stored records is limited to people who need it, and secrets are held outside the source code. No internet service is perfectly secure and we do not claim otherwise.
Changes and contact
If this notice changes materially the effective date changes with it. Questions go to hello@cherryhilladvisory.com.