What the workspace stores and shares.

Accounts and AI requests

Supabase handles sign-in and stores account profiles; Vercel hosts the application. L Hazard AI sends your submitted text, and the saved context you choose to include, to the selected AI provider. Do not submit credentials or information you are not authorized to share. Provider data policies apply separately.

Live research and model choice

Live research is on for new workspace chats. Choose Chat to turn it off before sending. While enabled, your submitted request and selected conversation context go to OpenAI. No search is made simply by opening the workspace. OpenAI may use derived queries to retrieve public web information. Search has additional tool and token costs under your existing provider limits. You can select a reviewed model for an explicit provider; model choices have different prices. Source links and search metadata are saved with completed answers. Retrieved pages are outside L Hazard AI’s control; verify important claims and do not include secrets in search requests.

Private project drafts

Project titles, notes and command drafts are stored in Supabase only after you save. Projects are private to the account within the application; infrastructure operators retain database access. Opening a command copies it into a new chat draft, without running it or automatically sharing other project notes. Archiving hides the project, but retains drafts and the original creation payload for recovery and idempotency. The 20-project limit includes archived projects; archiving is not erasure. Unsent edits are not automatically synced across devices.

Selected memory

Memory is an explicit, private notebook, not automatic learning or model training. You can save up to 30 notes, edit them, disable them or delete their active content. Only the enabled notes you select (up to five, within the request size limit) are rechecked on the server and sent with your next AI request. Selected memory counts toward input usage; it is treated as background data, never as permission to take actions. Do not save passwords or API keys here. The secret-pattern check is a best-effort warning, not a security guarantee. Deleting a note removes its active content but cannot retract text already sent to a provider, quoted in an answer, exported or held in backups. A salted creation fingerprint remains to prevent deleted notes being recreated by a repeated save request. Each account is limited to 1,000 saved-memory creation operations, including deleted notes, to bound that retained retry metadata. Changing accounts clears the memory selection.

Browser and external plugins

No isolated cloud browser executor is connected. The Browser panel shows readiness requirements, not a live browser session or permission grant. It does not access laptop tabs, cookies, screenshots or third-party accounts. Signing in on another website does not connect that account to L Hazard AI. A separate reviewed executor and scoped approvals are required before enabling browser actions.

Background agent jobs

Administrators can submit bounded planning, drafting and review jobs when a cloud worker is connected. Job goals, intermediate results, source links and status are stored in Supabase for the submitting account. Each step uses the same provider access and spending checks as the workspace. Cancelling a job stops subsequent steps, but cannot undo a provider request already sent or its cost. Job records are separate from saved conversations and are not removed by deleting a conversation. No unattended job runs without a configured worker; this feature does not grant shell access, send emails or make purchases.

Saved exchanges

Completed prompts and answers are stored in the cloud for your account. The workspace lists the latest 50 completed exchanges. You can open and download an exchange, then delete it using its Delete control. Deletion removes that saved prompt and answer and its saved context links. It does not remove text already quoted in another conversation, an in-flight provider request, downloaded copies, provider records or existing backups.

Usage and administration

Usage records store account/team references, provider, model, request identifiers, token counts, estimates and timestamps. Admin and CEO panels show this usage without displaying prompt and answer text. Deleting a conversation does not remove usage or billing records needed for cost controls. Infrastructure operators with database administration access can access stored application data.

Schedules and exports

Schedule titles, goals, timing, provider choices and status are stored privately in Supabase. Drafts save paused; activation separately approves future metered work and requires a connected worker. Removing a paused schedule hides its definition from the workspace but preserves it and occurrence evidence for idempotency and review; it is not complete erasure. Pausing may stop remaining stages but cannot undo an already dispatched paid request. Chat exports download only the displayed conversation and its available source metadata to your device. Review these files before sharing them; they may contain private text.

Voice and credentials

Voice input is optional and starts only when you request it. Your browser or device speech service may process audio remotely. You review dictated chat text before sending it to an AI provider. A separate voice-command widget previews an exact supported navigation or stop command and requires Apply; it never sends chats, deletes data, changes keys or edits budgets from speech. Chat dictation and voice commands cannot hold the microphone at the same time. Leaving or hiding the page stops its microphone and playback. Device read-aloud depends on installed voices; online read-aloud requires a separate opt-in. This is not a full-duplex realtime AI voice call. This app does not save raw microphone audio. API keys stay server-side; encrypted key edits use the existing cloud vault.

Interactive review

The public /review page is a sample interface, not your signed-in account. Projects, memory, messages, people, usage and budgets on that page are fictional and reset when the page reloads. It does not send AI requests or change live accounts, keys or billing. Local exports contain only the displayed sample conversation. Optional device voice controls still use the browser or operating system speech service described above. Do not enter secrets or personal data in the review.

Appearance preference

The Light, Dark or System appearance choice is stored as a display preference in this browser when storage is available. It is not an account setting and does not change authentication, provider permissions or AI requests. Choosing System follows the device preference. If browser storage is blocked, the current page can still change appearance without saving it.

Retention and account requests

No automatic expiry or self-service account deletion policy is configured yet. For account, billing, retention or access questions, email support@lhazard.com. For internal role changes, contact the organization administrator who provided your access. Never email credentials or verification codes. Backup restoration and third-party deletion require separate operator action. Approved public legal terms, tested support delivery and a retention policy still require the organization’s approval. The service address was supplied by the company owner; mailbox delivery was not tested during this review. The terms page is a draft, not an effective contract. The support page explains the customer contact route. A completed privacy-request workflow, identity checks and retention policy remain under review; an email does not automatically erase records.