Your message. Your choice.

GAS tools and existing accounts

GAS AI’s public tools are also available within Casey. Browser-private imports and encryption stay on your device. When you deliberately use a connected GAS tool, its request goes to the existing globalaiswarms.com service under that tool’s displayed consent and limits. Casey does not forward your account cookies or identity through this public connection. Saved profiles, account export/deletion and Founder controls open the protected GAS service with its own sign-in. Local GAS tool preferences may use browser storage; Public chat text uses tab session storage for refresh recovery; local workspace files remain in tab memory.

How an answer is made

Your question and a short excerpt of recent chat context normally go from Casey Assist to the existing GAS AI service and OpenAI. If that service explicitly reports that its allowance is exhausted, Casey may prepare the same bounded text-only request with Cloudflare Workers AI instead. No email, contacts, files, social accounts or private Casey spaces are connected by chatting. If neither cloud path can answer, Casey displays an availability notice. Built-in website, document, task and calendar tools create files in your browser without sending their content to AI.

Storage and control

Public chat stores up to 20 messages in this tab’s session storage so a refresh can restore them. Private collection chat, consent and unsent drafts are not saved. Casey does not save public chat messages to a user database. Use New chat to clear the selected conversation; each collection has its own local history. Browsers may restore session storage when reopening a tab, and it is not an encrypted vault. If browser storage is unavailable, chat stays in memory until reload. Files, tasks and imported messages also stay in tab memory. Downloads are separate copies under your control; removing an item in Casey does not delete downloaded copies. GAS retains limited request counters for abuse and usage control. The Cloudflare fallback retains only a daily opaque browser counter, not your message, IP address or account identity. OpenAI’s and Cloudflare’s provider data-handling policies apply; this is not a promise of zero provider retention.

What to share

Use general questions, ideas and non-sensitive drafts. Do not submit passwords, payment details, identity documents, confidential business material or sensitive personal information. AI answers may be inaccurate; check information before relying on it.

Availability

Free conversation has usage limits. The Cloudflare text fallback is available only when the existing OpenAI route reports an exhausted allowance, and it has separate daily browser and platform capacity limits. Built-in file tools are available without cloud AI credits. Chat is initially limited to reviewed regions; these controls do not certify worldwide legal compliance. Creating a file does not publish a website, add an event to your account, send a message or complete a purchase.

Selected feed streaming

Streaming is optional and requires sign-in. Choose up to ten messages, review the exact content and approve sharing. Message text is off by default and Private messages are excluded. Your device encrypts the selection before sending it; the viewing link contains the decryption key in its fragment. Anyone with that link can view or capture your selection. Access expires after ten minutes; Stop stream revokes the link. Expired encrypted records are cleaned up when new streams are created. Signing out of a fully verified account attempts to revoke your current stream. If revocation cannot be confirmed, the link still expires within ten minutes. Use Stop stream before signing out to confirm revocation. Erasing account data revokes account streams. A supported browser on another device is required; this does not connect or stream third-party subscription services.

Messages and spaces

Importing messages and attachments keeps them in your browser. If you separately paste an extract into Suggest interests and approve that action, the chosen text is sent to Casey for that request; the text is not retained in your profile. Message text is shown as text, never executed or treated as an instruction. The four spaces separate items in this browser tab; they do not provide authenticated access control or family sharing. In Private, cloud chat is disabled. The public site has no live connected email, social or messaging accounts.

Encrypted backups

You can save an encrypted workspace file and restore it on another device. Casey encrypts it in your browser with AES-256-GCM and a key derived from your passphrase using PBKDF2-SHA-256 (210,000 iterations, a random salt and nonce). Casey receives neither your passphrase nor your backup. Keep the passphrase separately; it cannot be recovered. Ordinary website, document, calendar and JSON downloads are unencrypted files.

Media and sharing

Local media files are played from your device. Opening a direct HTTPS media URL connects your browser to that provider, which receives the connection and applies its own privacy terms. Native file sharing and remote playback transfer your chosen data to the destination you select. Support depends on the browser, device and media source.

Connections and your profile

Account sign-in is verified with the existing GAS Supabase project. Casey sends the email and password you submit to that identity provider, and keeps a short-lived access token in a secure, HTTP-only session cookie. Casey never saves your password. Your account is identified by a keyed hash of its verified user ID; email does not grant authority. Permissions and confirmed interests are encrypted in Casey’s database and are separate from other members’ records.

Each service starts with no permission selected. Allow all applies only to the listed categories for that service, for 90 days. Choosing permission does not grant access at the provider or authorise messages, purchases or other external actions. Expired permissions stop being used and are removed when your saved permissions next load. Withdraw removes the service’s choices immediately. You can export or delete connection data under Connections.

Marketplace and affiliate links

Your published listing details are public for up to 30 days. Your account email and private profile are not published with the listing. The seller sets the original price and declared shipping charges; currency conversion uses Frankfurter reference rates and is an estimate. Only currency pairs, not profile information, are sent for conversion. The destination you select filters seller-declared availability. Casey does not infer willingness to pay.

Item checkout, fulfilment, returns and seller verification happen on the linked eBay or Etsy marketplace. Professional profiles link to supported hiring platforms; service scope, credentials, licensing, availability, booking and payment must be checked there. Casey does not verify individual sellers or professionals, hold stock, synchronise supplier inventory, enter hiring contracts or process marketplace payments. Your saved affiliate links are private and encrypted until you choose to share them; affiliate providers control tracking, approval and payments. Export and deletion include your item listings, service listings and saved affiliate links. Your public submission and confirmation of the displayed seller terms are retained in encrypted permission history even if you remove the public listing, until history expires or you erase all connection data. Sellers must have authority to offer their goods/services, state accurate prices and terms, and honour applicable consumer, product-safety and licensing rules. Prohibited, counterfeit or recalled goods and unlawful services are not permitted. Affiliate sharing must clearly disclose potential commission. Nothing in these terms excludes consumer rights that cannot lawfully be excluded.

Account security

Email/password sign-in is available. Google and Apple buttons check the identity provider’s current configuration and remain disabled until enabled there. Their native flow uses a short-lived encrypted verification cookie and PKCE; provider sign-in requests identity only and does not authorize inbox access. Passkeys are not enabled in this flow. After signing in, you can set up an optional authenticator app. Once verified, Casey checks the identity provider’s second-factor session before returning saved account data or accepting protected changes. Authenticator keys are shown only during setup; do not put them into chat. Keep a secure backup in your authenticator app. Casey cannot bypass a lost authenticator.

Permission records and withdrawal

From this release onward, Casey records new permission choices, changes, withdrawals, supported ElevenLabs connections/disconnections, voice-generation approvals and marketplace submission confirmations. Each record includes a verified, pseudonymous account reference, server timestamp, notice version and wording, and the choices made. It excludes passwords, API keys and message contents. Earlier decisions are not reconstructed. Public chat and device-only controls are not part of this account history.

Records are encrypted and checked for alteration using a server signature. This is an account record, not an independent certificate or a guarantee of evidence in a dispute. History is available for 365 days; expired records are removed during later account activity, so inactive records may remain stored beyond that period until cleanup runs. The history supports account review and handling permission queries. Use the Contact page for an access, correction, removal or dispute query; include the receipt ID rather than passwords or private message contents. Connections lets you view records and export every available page. Withdrawing permission stops its current use but preserves the withdrawal history. Erasing all connection data removes the history too; export first if you need a copy. Provider-held information is governed by that provider’s own retention and withdrawal process.

Introduction, country and language

The film starts muted. The introduction includes a locally generated synthetic English voice inside both MP4 files. Playback starts muted and requests no microphone or speech service. Twelve selectable subtitle tracks are available; visual headings and the interface remain English. Country, display currency and subtitle preferences are stored in this browser; precise geolocation is not requested and language is not inferred from your country.

Casey Coins and referrals

This optional free programme records a pseudonymous account membership, random referral code, dated points ledger and starter-pack redemption. A referral is credited only when another verified account joins using it; page visits grant nothing. Joining never grants data access, marketing permission or purchase authority. Points have no cash value and cannot be bought or transferred. You can export records or leave the programme from Coins; leaving deletes its membership, ledger and referral relationships. Read the current earning limits and exact benefit before joining. Your tour invitation code may be stored in this tab until used or removed.

Live product search

A submitted product search sends the search text and selected country to Shopify’s public catalogue. Your account, permissions, messages and interest profile are not attached. Shopify product images load directly from its image service. Results are held only in the current page and are not saved in Casey’s database or service-worker cache. Merchant prices, reported availability and destination matching are refreshed before offering the external product link. The merchant confirms eligibility, delivery, taxes, returns and the final price. Casey performs basic restricted-product screening, not a worldwide legal certification. A short-lived hashed network identifier limits requests per running server instance.

Approved interests may reorder these results locally when you choose that option. They are not used to change prices, request sponsored placements or trigger marketing messages. No affiliate commission or paid plan is activated by browsing.

Search and ElevenLabs

Submitting a DuckDuckGo search sends that query to its instant-answer API. Casey does not attach your profile or messages. External source and full-search links open their respective services. Web Desk addresses are held only in the current component until navigation; Casey cannot read the destination’s signed-in pages. It does not inherit DuckDuckGo browser protections or provide endpoint antivirus or a verified threat-update service.

An ElevenLabs API key you submit is encrypted for your account, omitted from exports, and unavailable for use after 90 days. Expired stored keys are removed when your saved connections next load. Disconnect deletes the stored key. Voice generation sends only the text and voice you explicitly choose to ElevenLabs and uses your account allowance. Provider retention and account billing settings still apply. Your key is never returned to the browser after it is saved.