Privacy policy

Draft operator text — not legal advice. Last updated 2026-07-28.

CherryOnTop is an invite-only sales-intelligence signal engine run by an operator on a dedicated instance. There is no public self-serve signup.

Accounts and access

Accounts are provisioned by an administrator. Sign-in uses an email address and a temporary password issued by that admin. Session cookies (HttpOnly) are set by Better Auth so you stay signed in across requests.

What we store

• Account identity (email, display name, role) in the instance control database.
• Per-workspace reader state (subscriptions, read/star, rules, tags) in SQLite files on the operator’s host.
• Shared article corpus content (titles, summaries, classifications) used by the Collection surface for signed-in members.

Workspace isolation

Each workspace’s reader data is private to members invited to that workspace. Instance administrators can see across workspaces in order to operate the product (provision accounts, monitor health). This is operator visibility, not a shared team feed — we do not claim sovereign or anonymous privacy from the people running the instance.

Cookies and tracking

We use session cookies required for authentication. These marketing and legal pages do not load third-party analytics or advertising scripts.

Contact

Questions about this policy: firas@constantly.co.