Back to Angel

Last updated July 22, 2026

About Angel & team →

Privacy

Angel helps journalists trace claims to Finnish public records and organize the resulting source trail. This policy explains what we collect, why, and what rights you have over it.

Data controller

The data controller for Angel is Sami Al-Khafaji. Contact: sami@withangel.io.

Information we collect

When you request access, we collect the work email and use case you submit. If you use Angel, we process the claims and queries you submit, the sources and citations Angel returns, and account activity needed to run the product, including a history of your past claims, which Angel saves so you can return to earlier work.

How we use information

We use this information to operate Angel, respond to access requests, maintain your claim history, improve how the product retrieves and matches sources, protect the service from misuse, and communicate with you about access, product changes, or support.

Confidentiality of what you submit

By default, we do not review the individual claims or queries you submit. For test users, we may look at specific claims, but only when that has been agreed with you in advance. We don't review your submissions without your knowledge and consent. Your submitted text is not used to train third-party AI models.

Legal basis for processing (GDPR)

For users in the European Union, we process your information under: consent, when you submit a request for access or actively use the product, and legitimate interest, to operate, secure, and improve the service.

Data retention

Your claim history is retained for as long as your account is active, so you can access past work. You can request deletion of specific entries or your full history at any time. If your account is closed, your data is deleted within 90 days.

Third-party processing

Angel uses OpenAI, Google Gemini, and Brave Search to process the text of claims you submit and generate results. Our backend and stored data are hosted on Google Cloud in the EU. These providers process data under their own privacy terms and only as needed to provide Angel's functionality.

Sharing

We do not sell personal information. We may share limited information with service providers who help us run Angel, or when required to comply with the law or protect the service. We do not otherwise share your claims, queries, or account data with third parties.

Security

Data is transmitted over HTTPS. Our backend and stored data are hosted on Google Cloud in the EU. We limit access to stored data to what's needed to operate and support the product.

International data transfers

The product and the data we store are hosted in the EU. Processing your claim may involve sending the relevant text to AI providers (OpenAI, Google) whose API calls are processed in the United States. This is limited to what's needed to generate your result and is not used to train these providers' models.

Your rights (GDPR)

You can request access to, correction of, or deletion of your personal data and claim history at any time. You can also object to processing or ask us to limit how we use your information. To exercise any of these rights, contact sami@withangel.io.

Children's privacy

Angel is not intended for users under 16. We do not knowingly collect information from children.

Changes to this policy

We may update this policy as the product evolves. The "Last updated" date above reflects the most recent revision.

Contact

For privacy questions, contact sami@withangel.io.