Deal room · Privacy notice

What the room records

This notice applies to CIRE Review Room. The room has no advertising or third-party tracking. The host sees engagement analytics about document reading, described below.

Why we record activity

The host keeps a record of access to protect confidential documents, to know which version each member saw and to answer questions.

What is logged

EventDetails recorded
Sign-in, sign-out and refused sign-inEmail address, display name, identity provider, time (UTC), IP address, browser user agent and the result
Page viewEmail address, document, version, page, time, IP address
Highlight or questionEmail address, the document, version, page and selected region, a hash of the selected text, your question and the time
Administrative changeWho made it, what changed and when

Engagement analytics

While you read a document, the viewer records how long each page stays open on screen (dwell time). It sends the document, version, page number and milliseconds when you change page or leave the tab. Nothing is sent while the tab is hidden, and no third party receives it.

The host sees per-document views, unique viewers, dwell time per party and a per-page reading heatmap. These figures are tied to your email address and party, are kept under the same retention period as the activity log, and are visible only to the host and the administrators they name.

Retention

Records are kept for 2 years after the room closes unless a legal hold applies. Sessions end when you sign out, after 12 hours idle, or after 168 hours at most.

Who can see it

Only the room host and the administrators they name can read the log and questions. Other members never see your activity or questions unless the host publishes an answer as an FAQ, which shows the question without your name.

Cookies

The room sets strictly necessary cookies only: a session cookie (HttpOnly, Secure, SameSite=Lax) and a short-lived sign-in cookie used while your identity provider returns you to the room.

Watermarks

Each page you view carries a visible stamp with your email address and the time of access.

Your choices and contact

To ask what the log holds about you, or to have it deleted early where the law allows, contact privacy@asgroup.ai.