Carbon Circuit Intelligence
Privacy
What is collected, where it goes, and how long it is kept. This describes what the software actually does.
Effective 24 August 2026.
In short
This website collects nothing and sets no cookies. Varra stores your account and your conversations, because a conversation that does not persist is not useful. Conversations are sent to a third-party AI model provider to generate replies. Nothing is sold, shared for advertising, or used to train models.
Who is responsible
Carbon Circuit Intelligence is a working name for a venture that is not yet incorporated. Until incorporation, the party responsible for the data described here is Benson Kraft, contactable at benson@carboncircuitintelligence.com. This section will name the company once it is formed.
What this covers
Two services, which collect very different amounts. This website, at carboncircuitintelligence.com, and Varra, the AI agent at varra-cci.onrender.com. Lucentra is not a shipping product and collects nothing.
This website
No accounts, no analytics, no advertising, and no cookies. Visitors are not identified or tracked.
Typefaces are served from this domain rather than a font CDN, so rendering a page sends no request to any third party.
What Varra collects
Account information. An email address, a display name, and either a password or a Google account identifier. Passwords are not stored. What is stored is a bcrypt hash with a per-password salt, which cannot be reversed into the original password.
Conversation content. The messages you send, the replies Varra returns, a conversation title, and the mode in use. This is retained so that conversations remain available across sessions.
Usage totals. Token counts per account, used to understand cost and load. These are aggregate numbers and contain no conversation content.
How it is used
To operate the service: authenticating you, returning your conversations, generating replies, and understanding load and cost. It is not used for any other purpose.
Who it is shared with
Third-party AI model providers. Varra's replies are generated by a third-party AI model provider. To produce a reply, your message and the earlier turns of that conversation are transmitted to that provider's API, and its handling of that data is governed by its own terms. The provider Varra uses is named on the Overview page.
Google, only where you choose to sign in with Google. That sign-in
requests three scopes — openid, email, and
profile — and Google returns an account identifier, your email address,
and your name.
Those three values are stored, and they are the only Google data retained. They are used to
create your account, recognise you on subsequent sign-ins, and address you by name in the
interface. The profile scope also exposes a profile picture, locale, and given
and family names; none of those are requested from the response, stored, or used. No Google
data is shared with anyone, sold, or used to train models, and Varra reads nothing else from
your Google account.
Service providers and infrastructure partners who host the application and database. They hold the data described above because they operate the systems it runs on. Their identities are available on request.
Information may also be disclosed where required by law.
Web search
Varra can search the web when a question depends on current information. Where it does, the search terms it constructs leave the service. Most questions do not trigger a search.
What is not done
Personal information is not sold, rented, or shared for advertising. Conversations are not used to train models. Neither the website nor the application carries third-party analytics or tracking.
Your choices
A copy of everything held about you can be downloaded from the account menu inside Varra. It is a single JSON file containing your account details, every conversation with its messages, and your usage totals. Your password hash is deliberately not included: it is of no use to you and does not belong in a file you might send somewhere.
Deleting your account is also done from that menu, described below.
For correction of anything inaccurate, or anything the two buttons above do not cover, email benson@carboncircuitintelligence.com. Requests are answered within 30 days.
Retention and deletion
Conversations can be deleted from within Varra. Deleting a conversation removes its messages from the database, not only from the list.
Deleting your account is done from the account menu inside Varra. It removes the account, every conversation, their messages, and the usage totals held against it. The action is immediate and cannot be undone.
If you would rather it were handled for you, email the address above and it will be.
Information is otherwise retained for as long as the account is active.
Security
Traffic is served over HTTPS. Passwords are hashed with bcrypt. Session cookies are HTTP-only and same-site, so they cannot be read by scripts running in the browser.
No service can guarantee that a breach is impossible, and this policy does not claim otherwise.
Where data is processed
Data may be processed in the United States and in other countries where the providers above operate. Using the service involves that transfer.
Children
Varra is not directed at children under 13, and information from them is not knowingly collected. If such information has been collected, contact the address above and it will be deleted.
Changes
Material changes will be reflected in the effective date at the top of this page, and described here.