Privacy

Last updated: November 13, 2026

Your Corner Advocate is an AI career guide operated by Protagonist Futures, Inc. ("we"), 1401 Lavaca Street #865, Austin, TX 78701. Questions or requests: support@yourcorneradvocate.com. The service is for adults 18 and over. If you tell us you are under 18, we decline to continue.

What we collect and why

• Your messages and the assistant's replies, and files you send, kept in your own workspace on our server so the guide can remember your goals and help over time.
• Your chat identity: if you text us, your phone number or Apple ID email; if you use Telegram, your Telegram identifier, display name and username.
• Your goals, plans and scheduled reminders, stored on our server so reminders can be sent on time.
• Your setup answers (name, city or region, goal, starting point, timing, time available, optional constraints) once you confirm them.
• Ideas: when ideas are on for you, your current memory and goals are sent to the AI model to prepare ranked ideas after setup and then daily. The latest ideas are saved in your workspace.
• Browser sign-in: a private one-time Telegram link and an HttpOnly cookie. We store only hashes of each. The cookie expires after 180 days of inactivity.
• Photos and voice notes: not accepted in this service.

We ask you not to send passwords, financial account numbers or other sensitive information.

Who we share data with (every vendor)

We do not sell your data. These providers handle it to run the service:

• OpenRouter (AI model routing). Your messages and relevant context are sent through OpenRouter to the AI model that writes replies. Every request is sent with data collection denied (data_collection: deny). Before each deployment we run a test that checks the models we use cannot be served by any endpoint that is not marked zero-data-retention by OpenRouter, and we stop the deployment if it fails. We do not say more about what the model providers do with data than OpenRouter's zero-data-retention listing states.
• Brave Search (web search). Search queries the assistant derives from your chats are sent to Brave Search.
• U.S. Department of Education College Scorecard API (via api.data.gov) (school research). School names and ZIP codes you ask about may be sent to it.
• Telegram (chat delivery). Telegram carries your Telegram messages and delivered files, under its own policy.
• Amazon Web Services (hosting, us-east-2, Ohio). Our servers and backups run on AWS. Backups are stored in an AWS S3 bucket with server-side encryption.
• Cloudflare (domain name, network access and traffic to the service).
• Sendblue (text/iMessage delivery). If you text us, your messages and files reach us through Sendblue, and Apple and your carrier also process them.

We do not share your data, phone number or text-message opt-in with any school. We do not share text-message opt-in data or phone numbers with third parties or affiliates for marketing or promotional purposes.

Protagonist Futures staff who run the service can see connected learners and assistant activity (messages and tool output) to operate and support it. Server operators can access stored data for operation and support.

Google user data (Google Calendar)

Connecting Google is not available yet. When it is, connecting will be optional, and you will do it on Google's own page from a one-time link.

• What we ask for: to sign you in and add events you approve, we ask Google for these permissions: openid and https://www.googleapis.com/auth/userinfo.email (so we know which Google account is connected) and https://www.googleapis.com/auth/calendar.app.created. That calendar permission lets Your Corner Advocate create its own calendar named "Your Corner Advocate" and add events to it. It does not let us see, change or delete any other calendar or event in your Google account.
• Gmail: Gmail is not part of Your Corner Advocate and we do not request Gmail access.
• What we write: an event in the "Your Corner Advocate" calendar, only after you agree to that exact event in chat.
• What we store: the Google account email, the permissions you granted, and a Google refresh token that we store encrypted (AES-256-GCM). Short-lived access tokens are not stored. We never see or store your Google password. Events we add appear in your conversation, which is stored in your workspace (see "What we collect and why").
• Who sees it: event details the assistant adds or discusses are part of your conversation, so they are sent through OpenRouter to the AI model (see "Who we share data with") and may appear in the assistant activity that our staff can see. We do not share Google user data with anyone else, and we do not sell it.
• No AI training: We do not use Google Workspace data to develop, improve or train generalized AI or machine-learning models.
• Limited Use: The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
• No advertising: we do not use Google user data for advertising.
• Disconnect: in your dashboard, you can disconnect Google; we then revoke access at Google and delete the stored token. You can also remove Your Corner Advocate in your Google Account's security settings (myaccount.google.com/permissions).

Retention and deletion

Your data stays on our server until it is deleted; the application has no automatic expiry for it. We delete data when you ask: when we process a deletion request, we revoke your outside connections at Google, then remove your account, workspace, sessions, reminders, messages and connection records from our server. To delete your account and data, email support@yourcorneradvocate.com from the phone number or account you use with us. We delete your data, including any Google tokens, within 30 days of your request, and backups expire within 90 days.

Backups of the server are copied to an AWS S3 bucket in us-east-2 and are deleted automatically 90 days after they are written. Deleted data therefore stays in backups until they expire. Deleting data on our server does not delete copies held by Telegram, Sendblue or Apple. Public school facts we gathered stay in the shared school catalog and contain no student information.

To ask for deletion, email support@yourcorneradvocate.com from the account you use.

Changes and contact

We will post changes here with a new date. Contact: support@yourcorneradvocate.com. Protagonist Futures, Inc., 1401 Lavaca Street #865, Austin, TX 78701.