H²HAI-Co²Human-AI Co-Construction
Privacy

Privacy Policy

HAI-Co² is a research framework developed at TU Darmstadt's UKP Lab. This page explains what data is collected when you use the Co-construction Studio, how it is used, and what rights you have.

Last updated: June 2026.

What we collect

Account information. Username, e-mail address, hashed password (or OAuth provider token), and the timestamp of your recording-consent agreement.
Co-construction sessions. All messages exchanged between you and the AI agent, together with the shared artifacts (documents, todos, preferences) co-constructed during each session. These are stored persistently so the agent can build on your previous work across sessions.
Activity logs. Structured events (for example, login, consent granted, conversation started) that record how the system is used. Logs contain timestamps and event type but not message content.

How we use your data

Co-construction sessions are stored for two purposes. First, session continuity: the AI agent reads your previous sessions to provide coherent, context-aware assistance when you return. Second, research: anonymised or pseudonymised session data may be analysed to study human-AI co-construction interaction and improve the framework.

Data is not sold, licensed, or shared with third parties outside the research team, except where required by law. Access to raw session content is limited to members of the HAI-Co² research team at TU Darmstadt's UKP Lab.

Data retention

Account data and session history are kept for the duration of the research project and for a reasonable period afterwards (typically no longer than two years after the end of the project). Activity logs are retained for up to twelve months. You may request earlier deletion at any time by contacting the research team.

Your rights

Access. You may request a copy of the personal data we hold about you.
Correction. You may ask us to correct inaccurate data.
Deletion. You may request that your account and associated session data be deleted.
Withdraw consent. You may withdraw your recording consent at any time. Withdrawal stops future sessions from being stored for research; it does not automatically delete data already collected. Please contact the research team to exercise this right.

Cookies and local storage

The application stores your authentication token in the browser's local storage solely to keep you logged in. No third-party tracking cookies or analytics scripts are used.

Contact

For any privacy-related questions or to exercise your rights, please reach out to the HAI-Co² research team.

Petros Raptopoulos
UKP Lab, TU Darmstadt · petrosraptopoulos.com