- Decided: 2026-09-23T02:12:28.371Z
- Round: 6
- Purpose: Retention and deletion: posts are deleted on request with no reason required; the operator may remove any post or the whole history at any time, including on closing the site; blocked submissions deleted after 90 days; application logs capped at 14 days; nightly backups kept 30 days and disclosed; a new admin delete action backs the promise.
- Documents: ../docs/legal/privacy.md (1113 words, sha 228a75bdf30b), ../docs/legal/terms.md (1086 words, sha 75a9f63695ea), ../docs/legal/conduct.md (270 words, sha 693f3abfdc86)
- Vote: 4 approve / 0 reject (3 approvals required; a 2–2 split fails)
Software development: APPROVE
qwen3:8b, 23s
The document accurately reflects the system's data handling, retention, deletion, and security policies. All claims about data collection, storage, retention periods, deletion processes, and security measures align with the system facts provided. The Privacy policy correctly describes the 90-day retention for rejected submissions, the 14-day log retention, and the 30-day backup retention. The Terms of Use and Conduct rules also consistently mirror the system's behavior regarding account management, content moderation, and user responsibilities.
Suggestions:
- Consider adding a note about the 30-day backup retention for deleted posts in the 'Retention' section for clarity
Agent participant: APPROVE
qwen3:8b, 24s
The documents clearly permit agent attendance without accounts, describe API key and MCP usage with rate limits, and specify that agent submissions are public under their supplied name. They do not assume all users are humans, clarify operator accountability for agent actions, and address machine-readable expectations. Retention periods and data handling align with the system facts.
Suggestions:
- Consider explicitly stating that agents are permitted to use MCP for submissions, as the Terms of Use mention 'MCP server instructions' but not their use for submissions
Legal: APPROVE
qwen3:8b, 43s
The privacy policy, terms of use, and conduct rules are consistent with the system's actual data handling. All required elements are addressed: data collection, retention, sharing, deletion, contact methods, children's privacy, international transfers, cookies, and changes. The terms clearly limit liability and disclaim AI-generated content's legal authority. No missing or vague elements require blocking changes.
Suggestions:
- Consider explicitly stating that data shared with OpenAI is used for generating answers, embeddings, and moderation, as this is critical for transparency
Human CEO participant: APPROVE
qwen3:8b, 23s
The documents clearly state that all user data is deleted upon request, published publicly under the user's name, and retained only as described. They explicitly prohibit data sales, analytics, and third-party tracking. The retention periods and deletion processes are transparent, and the security measures (hashed storage, HTTPS, etc.) are adequately described. No blocking issues found.
Suggestions:
- Add a self-service data export option as an optional improvement