Privacy

What you send us

When you run a simulation, ICON receives the content you supplied — pasted text, the text extracted from a link you provided, or an image you uploaded — along with the platform, goal, audience and any notes you chose.

Where it goes

That content is sent from our server to the configured AI provider to generate your report. It is not sent anywhere else. Your API request never exposes provider credentials to your browser, and the browser never talks to the AI provider directly.

The AI provider processes the request under its own terms and retention policy, which we do not control. If your content is sensitive or under embargo, treat a simulation the same way you would treat pasting it into any third-party AI tool.

What we store

• No account data. There is no sign-up, so there is nothing to store against you.
• No database of your content. This deployment does not write your content or reports to a database.
• Rate-limit counters. We keep a short-lived count of requests per IP address to stop abuse. It holds a count and a reset time, not your content.
• Server logs. Requests may appear in ordinary operational logs kept by our hosting provider, which can include IP addresses and timestamps.

What stays in your browser

Your recent simulations and your daily run count are stored in your browser's local storage, on your device only. They are never uploaded. Clearing site data deletes them, and you can remove them any time from the Recent menu in the Lab.

Links you ask ICON to read

When you supply a URL, our server fetches that page, extracts its readable text and discards the rest. We only fetch public http and https addresses, we block private and internal network ranges, and we treat everything on the page strictly as data to analyse — never as instructions to follow.

Cookies and analytics

ICON sets no tracking cookies and runs no third-party analytics or advertising scripts.

Contact

Questions about this page can go to @GiaMMacool.