Privacy Policy — The Third Witness

1. Who we are

The Third Witness ("we", "us") is a trauma-informed mediation platform that hosts live video sessions with an AI co-mediator. This policy explains what we collect, why, and your rights.

2. Information we collect

Account data: email, display name, authentication identifiers.
Intake content: the text, context, and concerns you submit before a session.
Live video & audio: streamed peer-to-peer (WebRTC) between participants. We do not record or store raw video/audio on our servers.
Transcripts: speech is transcribed in your own browser and the resulting text is saved to the session record so the AI co-mediator and human mediator can review it.
Chat & system events: messages, consent acceptances, pause/resume/end actions.
AI suggestions: outputs of the AI co-mediator generated from the live transcript window.
Payment data: handled by Stripe; we never see or store your full card number.
Technical data: device/browser info, IP address, error logs.

3. How we use your data

To run and moderate live mediation sessions.
To generate AI co-mediator suggestions for the human mediator only.
To maintain a record both parties and the mediator can review.
To process payments, prevent abuse, and meet legal obligations.

We do not sell your personal data. We do not use your session content to train third-party AI models.

4. AI co-mediator ("The Third Witness")

Live transcripts are sent in short windows to our AI provider (Lovable AI Gateway) solely to produce reframing suggestions and escalation alerts. The AI does not speak in the room, does not take sides, and its suggestions are visible only to the human mediator.

5. Sharing

We share data only with: (a) the other participants in your session, (b) our processors (hosting, database, payments, AI gateway) under contract, and (c) authorities when legally required.

6. Retention

Transcripts and session events are retained for as long as your mediator account is active, or until you request deletion. Raw WebRTC video/audio is never persisted.

7. Your rights

You may request access, correction, export, or deletion of your data at any time. To exercise these rights, email privacy@thethirdwitness.app. Parties who joined via a share link may request deletion of their contributions by contacting the session's mediator or us directly.

8. Security

Data is encrypted in transit. Access is governed by row-level security so only authorized participants and mediators can read a given session.

9. Children

The service is not directed to children under 16. Do not use it to mediate disputes involving minors without a verified guardian present.

10. Changes

We will post any material changes to this policy on this page and update the date above.

11. Contact

Questions: privacy@thethirdwitness.app