Privacy — ade-catalog

ade-catalog is part of ADE, an open-source project run by Roberto Butinar as a private person. For any question about your data, write to hello@ade-family.com.

The hosted ade-catalog at ade-catalog.vercel.app: a catalog of analytics metadata (tables, reports, measures and the lineage between them). Access is by invitation; without one, a new account joins a waiting list. The demo organization holds only synthetic and public sample metadata, and every visitor of the demo sees the same content. Please do not type personal data into the questions you ask.

• One account works across all ADE products. It holds your email address, your password (stored only as a hash), whether you confirmed the address, which ADE products you may use, and when you accepted this notice.
• It is kept by Supabase in the EU (Frankfurt) until you ask to delete it.
• The 6-digit confirmation codes are sent by email through Resend, from the EU (Ireland).
• Access emails go the same way. When you ask for access to an ADE product, the family owner gets one email with your address, the product and how you asked. When you are admitted, you get one email that says so.

• Access. Your account records the organizations you belong to and your role in each, the invitation codes you used, and, if you are on the waiting list, that you asked for access. They are kept with your account, in Supabase in the EU (Frankfurt), until you leave or ask to delete it.
• Administration. When an administrator admits you, changes your role or revokes your access, a record is kept of who did it, what changed and when. It names your account by its identifier, not by your email address, and it is kept in Supabase in the EU (Frankfurt) as the record of how access was administered, also after your account is deleted.
• The assistant. What you type, together with what is on screen (the graph you are looking at) and the results of the catalog queries the assistant runs, is sent to the API of Anthropic PBC, in the United States, which writes the answer. Under Anthropic's policy, API inputs and outputs are deleted within 30 days and are not used to train its models.
• Your chats. They are not written to any database: they live in the memory of the server that answered you, and disappear when that server stops, usually within hours. ade-catalog does not keep them for later.
• Descriptions you edit. If your role lets you edit a description in the catalog, the change is saved with your email address as its author, and is kept with that organization's catalog in Supabase in the EU (Frankfurt). The members of that organization can see it.
• API keys. A key for connecting an AI tool to the catalog is issued only on request. Only a hash of it is stored, with the time it was last used; it is deleted with your account.
• Excel exports. They are built when you ask and downloaded to your device. No copy is kept.
• Hosting. ade-catalog is hosted by Vercel Inc. in the EU (Frankfurt). Like any web server it receives your IP address and the details of each request, and keeps them in short-lived logs under its own privacy policy.
• Page components. Some pages load open-source components (page styling, interactivity, the graph and diagram views) directly from public content delivery networks: cdn.tailwindcss.com, unpkg.com and cdn.jsdelivr.net. Your browser requests them itself, so those networks receive your IP address and browser details, under their own policies. Nothing else is sent to them.

ade-catalog sets only the cookie that keeps you signed in and remembers the organization and view you chose. It is strictly necessary, so there is no cookie banner. There are no analytics, ads or third-party trackers.

Your account and the service itself are provided because you asked for them (Art. 6(1)(b) GDPR). The server logs and the record of administration serve the legitimate interest of running, protecting and accounting for the service (Art. 6(1)(f) GDPR).

You can ask for access to, correction or erasure of your data, or object to its processing, at the contact above. Deleting your ADE account removes it from every ADE product. You can also complain to a data protection authority; in Italy that is the Garante per la protezione dei dati personali.

Any change is published on this page with a new version. When it changes, ade-catalog asks you to accept the new version the next time you use it.