Volver

Last updated October 14, 2026

Privacy Policy

Discovery HQ asks before your information goes to outside AI services. Change your AI services choice

About Discovery HQ

Discovery HQ is the private, invite-only workspace that Discovery Marketing's own team and contractors use for projects, tasks, scripts and content production. It is not offered to clients or the public, and accounts are created only by invitation from Discovery Marketing. This policy explains how we handle information when you use the Discovery HQ website, the Discovery HQ iPhone app, or the Discovery Marketing website-planning plugin in ChatGPT or Codex.

ChatGPT and Codex website planning

The public planning tools do not require a Discovery account. When you use them, your AI application sends the business details you choose to provide to Discovery: business name, audience, service area, services, conversion goal, differentiators, supporting evidence, and answers about your assets and readiness. Discovery uses those details to return a website plan or readiness checklist to that application. Do not include passwords, payment details, sensitive personal information, or private customer records in a planning brief.

These planning tools process the brief for the request and do not save it as a project or customer record in Discovery HQ. They do not access your HQ account, crawl a website, contact another person, or publish a site. Our hosting and security providers may process technical request information to operate and protect the service. Your conversation and the returned plan may be retained by OpenAI under its policies and your account settings. This plugin does not delete that conversation; manage it in ChatGPT or Codex. Contact us using the address below for questions or requests concerning information held by Discovery.

Information we collect

  • Account information: your name, email address, role, language, and authentication information.
  • Workspace content: projects, tasks, scripts, files, time entries, approvals, and other material you create or upload for your work with Discovery Marketing.
  • Recordings: video and audio you choose to capture or upload for content production, together with related file, session, and media metadata such as capture date or location when included by your device.
  • Your AI services choice: whether you allowed AI services, and when.
  • Technical information: session, device, browser, diagnostic, security, and usage information generated while operating the service.
  • Communications: messages and support information you send to us.

Camera and microphone

Discovery HQ requests camera and microphone access only when you choose to record content. Recordings are kept in the app's local storage while a shoot is in progress and are uploaded when you accept or submit them. We do not activate the camera or microphone for advertising or tracking.

How we use information

We use information to:

  • provide, secure, maintain, and troubleshoot Discovery HQ;
  • authenticate users and enforce project and role-based access;
  • store, process, upload, transcribe, translate, organize, and deliver requested content;
  • support collaboration, notifications, approvals, and support requests; and
  • comply with legal obligations and protect our team, Discovery Marketing, and the service.

AI services and your permission

Some features use AI from outside companies: transcribing recorded takes, the Elcano assistant and department-head chats, translating team text when our own translation computer can't, AI visuals and Yapper graphics, answering to-dos with Claude, and preparing fixes for bug reports. Before these features send any of your information to those companies, Discovery HQ asks for your permission on the AI services page, right after you first sign in. Nothing is selected for you, and until you choose, the answer is treated as no. When a take or graphic includes another teammate (for example, the person speaking on camera), everyone in it must have said yes.

If you allow AI services, the information listed for Meta, ElevenLabs, OpenRouter and Google, OpenAI and Anthropic below is sent to that company only to produce the result you asked for: a transcript, an answer, a translation, an image or a fix. If you don't allow them, recording, uploading, scripts and tasks keep working; your takes are transcribed on Discovery's own computers instead, the Elcano assistant stays off, your text is translated only on our own computer, AI visuals and Yapper graphics aren't made for your work or with your photos, to-do answers aren't sent to Claude, and your bug reports are fixed by the team by hand.

You can change your choice at any time: in the app, open Menu → your name → AI services, or tap Change your AI services choice at the top of this page, or go to hq.discoverymarketing.io/ai-services. A change applies from that moment on. We don't use this information for advertising or tracking.

Service providers

Discovery HQ uses these providers to run the service and complete work you request. We also share information when the law requires it or to protect rights and safety. Providers marked “Only with your AI permission” receive the information described for them only if you allowed AI services.

  • VercelHosting for the website and the pages the iPhone app shows

    Requests to Discovery HQ, including IP address, device and browser details, and the content of the pages and forms you use.

  • SupabaseSign-in and database

    Your account details (name, email address, role, sign-in sessions) and the workspace records you create, such as tasks, projects, scripts and time entries.

  • Cloudflare R2File storage

    The recordings, photos and other files you upload, and the versions Discovery HQ makes from them.

  • Meta (Muse models)AI servicesOnly with your AI permission

    Audio of takes you record or upload, or where you're the speaker on camera, and their transcripts, and the recordings of messages you speak to the Elcano assistant and department-head chats, to turn them into text (Muse Voice); prompts, script text, take transcripts and the on-camera speaker's reference photos for AI visuals and Yapper graphics (Muse Spark plans them, Muse Image draws them); and, only when Anthropic's Claude is unavailable, what would have gone to Claude (your messages to the Elcano assistant and department-head chats and the workspace records they read, and the text of spoken messages to tidy it), so Muse Spark can answer as the backup.

  • ElevenLabsAI servicesOnly with your AI permission

    Audio of takes you record or upload, or where you're the speaker on camera, to transcribe them and time each word, and the recordings of messages you speak to the Elcano assistant when Meta's Muse Voice is unavailable (Scribe).

  • OpenRouter and Google (Gemini)AI servicesOnly with your AI permission

    Team text you write, such as tasks, projects and notes, when Discovery's own translation computer can't translate it between English and Spanish.

  • OpenAIAI servicesOnly with your AI permission

    Prompts, script and AI video production text, and reference photos for AI visuals and AI video scenes; the text and screenshots of bug reports you post in Slack, and the HQ page they came from, so Codex can prepare a fix for the team to review. OpenAI also runs ChatGPT and Codex, where the separate planning plugin described above operates.

  • Anthropic (Claude)AI servicesOnly with your AI permission

    Your messages to the Elcano assistant and department-head chats (typed, or spoken and turned into text), and the workspace records they read to answer you, such as your tasks, projects and the page you're on; the text of spoken messages, to tidy it before you edit and send it; and your answer and note when you answer a to-do, with the to-do's and its project's details, so Claude can carry out the work you asked for.

  • PlaidBank connections (read-only)

    Only if you connect a bank: you sign in to your bank inside Plaid, and Plaid sends Discovery HQ the names, types and balances of your accounts and, in Familia, your posted transactions. Discovery HQ identifies you to Plaid with a coded ID, never your name or email. See Bank connections below.

  • ResendEmail delivery

    Your name and email address and the content of sign-in, invitation and notification emails Discovery HQ sends you.

  • SlackTeam notifications

    If your Slack account is connected to Discovery HQ, the text and links of notifications about your work.

  • AppleiPhone notifications

    If you allow notifications in the Discovery HQ iPhone app, a device token for that iPhone and the title, text and link of each notification about your work, which Apple's push service delivers. Signing out or deleting your account removes the token.

People who open a Discovery demo

When we make a demo for a business, such as a personal walkthrough page or a private website review, its link opens a page on Discovery HQ. The first time it opens, we ask whether the business approves of us using its logo and colors for the demo.

  • What we collect: your IP address; the approximate location (city, region and country) that our hosting provider, Vercel, estimates from it; your type of device and browser; your viewing activity, such as when you opened the demo and how much of the video you watched; and your approval choice and when you made it. If you fill in a form on the demo, we keep what you send.
  • Why: to follow up with your business about the demo. We don't sell this information or use it for advertising.
  • Locked demos: if you choose “I do not approve”, the demo is locked and can't be viewed. A locked demo and its data are deleted within 30 days: the demo website, video and images, the copy of your logo we stored, and the record of who viewed it. You can unlock it before then.
  • Deleting it now: on a locked demo, choose “Delete it now”, or email us at the address below. After a demo is deleted we keep only what we need to never contact you again (your business name, its email domain and phone numbers, and contact details, marked “do not contact”, and the date it was deleted) and our internal work records, such as the public research we used, without the demo or its files. To stop hearing from us without deleting the demo, choose “Not interested? Stop contacting us” on the demo page, or email us.
  • Do not contact covers your whole business: when you ask us to stop or delete a demo, we stop contacting everyone at your business's email domain and its phone numbers. If someone from your business later fills out one of our forms, we treat it as a new request and start fresh; nothing from the earlier demo is brought back. An email address that asked us to stop stays off our marketing emails unless that same address fills out a form itself.

Bank connections (Plaid)

Familia (Discovery HQ's family app) and the Finance & Capital center can connect a bank account through Plaid so balances and spending don't have to be typed by hand. It's optional and you choose each bank.

  • Read-only: Discovery HQ asks Plaid only for balances, transactions and investment balances. It never asks for account or routing numbers and has no way to move, send or withdraw money. You type your bank password into your bank's own sign-in inside Plaid; Discovery HQ never sees it.
  • What we keep: the access key Plaid gives us for your connection, encrypted (AES-256-GCM) and opened only on our server to read from Plaid; the names, types and balances of your accounts (never account numbers); and, in Familia, your posted transactions (date, amount, description and category).
  • Who sees it: in Familia, only you, until you share an account with your household. Andy's own connected balances also appear in his private My Money page. The company's bank connection in Finance & Capital is seen only by Andy. Bank screens open only after you verify with your passkey (or your backup code).
  • How we use it: only to show your balances and spending and to plan bills and transfers on these screens. We never sell bank data, never use it for advertising, never send it to an AI service, and never use it to move money.
  • Disconnecting: in Familia, open Money → Bank connections → Disconnect (Finance & Capital: Overview → Bank connections). Disconnecting ends the connection at Plaid right away and deletes the access key we stored. The accounts and transactions it brought into Familia are deleted 30 days later; a company connection's balances leave Finance & Capital right away. You can also see and remove the apps connected through Plaid at my.plaid.com.
  • When a login is deleted: if your login is deleted or you leave the household, our daily check ends your bank connections the same way within a day, and their data is deleted 30 days later.
  • Plaid's own policy: Plaid handles your bank sign-in under the Plaid End User Privacy Policy.

No sale or cross-app tracking

We do not sell personal information, and Discovery HQ does not use recordings or workspace content to track you across apps or websites owned by other companies for advertising.

Retention and security

We retain information for as long as needed to provide the service, complete your work with Discovery Marketing, meet legal obligations, resolve disputes, and protect the service. Bank data follows the shorter rule in Bank connections. We use administrative, technical, and organizational safeguards designed to protect information, but no system can guarantee absolute security.

Your choices

  • Delete your account: in the app, open Menu → your name → Delete my account. This removes your sign-in, your name and email address, and your personal settings, devices, notifications and connections, and stops any outside AI processing of your information. Work you created for Discovery Marketing, such as scripts, recordings and tasks, stays with the company and is shown as “Deleted user”. You can also ask us to delete your account at the address below. Information we must keep for legal or contractual reasons is retained only as required.
  • AI services: allow or stop them at any time with Change your AI services choice at the top of this page.
  • Access and correction: email us at the address below to request a copy of, or a correction to, your personal information.
  • Camera and microphone: you can deny these permissions in iOS Settings, although recording features will not work without them.

Children

Discovery HQ is a business service and is not directed to children under 13.

Changes and contact

We may update this policy as Discovery HQ changes. The latest version will appear on this page with its effective date. Questions or privacy requests can be sent to andy@discoverymarketing.io.