Your data and your account¶
What BeCoMe stores about you, who can see it, and how to take it back. This page is for the person using the product. The engineering account of the same system, including what it deliberately does not defend against, stays in the repository rather than here.
Your password¶
Your password is never stored. What is stored is a bcrypt hash of it, which cannot be turned back into the password, and which is computed fresh with a different salt for every account. Two people who choose the same password get different hashes.
Repeated failed sign-ins to one account are throttled, so someone working through a list of guesses is slowed to uselessness. An email address that has never registered is treated exactly like one that has, including the time it takes to answer, so the sign-in form cannot be used to find out who has an account here.
Your session¶
Signing in gives your browser two tokens, held in cookies your own page scripts cannot read. The short-lived one authorizes requests. The longer-lived one renews it, and it rotates on every renewal: each use mints a new token and retires the old.
That rotation is the part worth knowing. If a refresh token is ever stolen and used, the theft shows up the next time your own browser renews, because the token it holds has already been retired. The whole session is then revoked rather than left running beside the thief's.
Who can see your opinions¶
Inside BeCoMe, the members of the project and nobody else. What the assistant sends to its model is listed below. A project is visible to its owner and the experts invited into it. Your opinion carries your name, so a panel is not anonymous: everyone in the room can see who said what, which is the point of a panel and worth knowing before you answer.
When an admin removes someone from a project, that person's opinion is deleted in the same operation and the result is recalculated without it. The opinion does not linger in the project after the person has gone.
What the assistant sends¶
The assistant works only when you open it and send a question. That question goes to an AI model together with up to the last 20 messages of the conversation, a few excerpts from the BeCoMe documentation and published papers, and the data of the project open in the panel. For the project that means its name, description, scale and result, and the opinions in it with each member's first name, last name, position and values. It covers every member of the project, not only you. The one exception is a member who turned on Hide my opinions from other members' assistant: their opinions are left out for everyone else, as Your data explains. Your email address, account ID and photo are never sent.
The model runs at OVHcloud AI Endpoints in the European Union (Gravelines, France). OVHcloud does not store questions or answers and does not use them to train models. The conversation stays in your browser tab and is erased when you close the tab or sign out.
For 14 days each turn, the answer included, is also recorded in a trace store in the EU, with member names and positions replaced by labels. The store is run by a US company (LangChain), and the EU standard contractual clauses cover that transfer. Names are also found in their Czech case forms and without diacritics, but a typo, a diminutive or nickname, a position the model translates, and the name of a person who is not in the project pass through unchanged. The Privacy notice has the details, and Where the data is processed lists where each service runs.
Taking your data out¶
Export. One request returns everything the system holds about you as a JSON file: your profile, the projects you own with their results, the projects you joined, every opinion you have given, and the invitations you received. It does not include invitations you sent, because those are about the person you sent them to.
Deletion. Deleting your account removes it, along with your profile photo. Projects you administer need a decision first: for each one you either hand it to another member or delete it. The account goes only after every project you own has an answer.
That extra step is deliberate. Without it, one person leaving would silently take a whole panel's work with them, including opinions that other people gave.
Email¶
Your address is used to sign you in, to confirm the account when you register, to reset a forgotten password, and to let you know when someone tries to register with the address of an account that is already confirmed. The emails are delivered by Resend, which sends them from Ireland and keeps message records in the United States, as Where the data is processed explains. Each email is in the language the interface was in when the request was made, Czech or English. Invitations to a project are not emailed: you see them in the application. The address is not used for anything else, and it is visible to the members of projects you join.