A clear view of
what this site uses.

The current website

RSI AI operates this public demonstration website at rsiagent.app. It presents proposed business workflows and cost choices through synthetic browser-based prototypes. The public replay demo needs no account. Optional invited sign-in and a model allowance ledger are available when the account backend is configured. There is no real document upload, external booking, quote delivery or production CRM connection. Paid models are disabled in this release; only the owner can authorise a future release that enables them.

Your privacy controls

Open Privacy settings to allow or disable saved demo edits, choose an expiry, grant live-model permission for one hour, export saved tab data or clear it. Saving preferences uses this tab’s session storage. All optional data processing starts off.

Invited sign-in and allowance records

If account services are connected, Account & allowance accepts an invited email address and sends a sign-in link through Supabase Auth. A ten-minute HttpOnly login cookie binds the link to the browser using PKCE; provider tokens are exchanged only on the server. The server verifies the email before creating a revocable session. Public sign-up is disabled. A Secure, HttpOnly, SameSite session cookie expires within one hour. No provider token is kept in browser storage. Signing out revokes this session; clearing demo tab data does not.

The shared backend stores the authenticated user ID, hashed session identifier, expiry, integer AUD allowance amounts, request identifiers and request hashes. It stores no prompts or CRM tool results in the monetary ledger. Pending and charged amounts share a hard AUD 20 cap per user per Melbourne calendar month, based on the request reservation month. Ambiguous charges retain their holds. Hashed email/IP rate keys expire after each ten-minute window and are removed by later sign-in requests. Expired sessions are rejected and removed on later sign-ins. Monetary records are retained for reconciliation; no automatic deletion period is claimed. Contact the operator about account or ledger deletion. Backend project region and hosting terms determine processing locations; Australian residency is not claimed.

Case agent and paid-model release lock

The service CRM prototype includes a case agent. Only after a future owner-approved release, configured authentication, a verified cost envelope, available allowance and time-limited permission in Privacy settings could each step send your typed task and the fictional CRM records the agent reads to Anthropic's Claude API through an RSI AI endpoint, which applies a fixed instruction, a fixed tool list and request limits. Anthropic processes that content under its commercial terms. When the panel shows replay mode, no model is called. Do not enter real personal information in the agent task box. Proposed record changes apply only to this tab's sample workspace after you approve them.

Demo controls and local inputs

Synthetic enquiry selections, workflow settings, sample edits, approvals, token-simulation controls and calculator values are processed in your browser. The pilot-brief builder asks for general business context, not a name or email address. It creates a text download or copies text when you request it; it does not submit an enquiry to RSI AI.

Please do not put personal, client or confidential information in the demonstration or brief builder. The site does not store these inputs in cookies. The service CRM prototype does not save edits by default. If you enable it, the existing action log is kept in this tab’s session storage with your chosen inactivity expiry (15 minutes, one hour or 24 hours). Expiry is checked on page access and periodically while a page remains open; sleeping browsers cannot run deletion timers. Closing the tab normally clears session storage, but a browser may restore it. Use Clear tab data to remove it explicitly. Saved edits are not uploaded merely by saving them; an authorised live-agent run can send the records it reads to the provider. Other demo state clears when you reload or close the page; downloaded or copied material remains under your control. The visual-motion setting is stored for this browser tab so your preference survives page navigation.

Hosting requests

The website is hosted on Vercel and delivered through Cloudflare. Its hosting infrastructure may process ordinary technical request information, such as IP address, browser information, requested resource and time, to deliver, secure and operate the website. Local demo controls do not eliminate those ordinary hosting requests. Processing locations and retention are governed by the actual hosting service and applicable arrangements.

See Vercel’s privacy notice for its published information. Cloudflare’s privacy policy describes its network services.

Analytics, cookies and outside links

RSI application code does not add analytics, advertising pixels or an embedded third-party video player. Optional sign-in uses the essential session cookie described above; replay needs no cookie. Privacy settings display the browser’s Global Privacy Control signal when supported. There is no application tracking switch to enable. Cloudflare may inject its own Web Analytics script; the site’s Content Security Policy blocks that third-party script. Browser preferences do not disable ordinary infrastructure logs or independently configured edge services. Fonts and application assets are served with the site. Following an external program or documentation link takes you to a separate website with its own terms and privacy practices.

Application request logs

The agent API records a generated request ID, response status and duration, without logging your task, tool results, raw IP address or credentials. Per-instance rate limiting keeps temporary keyed hashes in memory. Infrastructure logs remain subject to the hosting providers’ actual arrangements. Clearing tab data cannot erase provider-side records or downloaded files.

Contact channel

For a business enquiry or privacy request, email founder@rsiagent.app. A mail link opens your email application; you choose whether to send a message. The brief builder does not send email or submit a request. Please leave confidential client records out of an initial enquiry.

Future features

Real customer onboarding, uploaded records, analytics or enabled model processing would change the data scope. This notice and the corresponding operating arrangements will be reviewed before those capabilities are enabled.

Updates

This notice describes the public website and its email contact route. The date above identifies its latest review. Read the trust and data-handling overview for the proposed controls of a future pilot.