Workspace boundaryPrivate Product data is not acquisition content.
Product photos, product details, prompts, generated assets, storage IDs, signed URLs, and seller identity remain workspace-scoped. A public example requires a separately approved derivative and disclosure.
Authorization first
Robots rules never substitute for Convex workspace authorization or API checks.
Proof is explicit
The public registry does not enumerate private products automatically.
Analytics is narrow
Consent-gated events exclude product content, prompts, email, names, raw URLs, and storage references.
Review before publication.
- Public pages only use approved details and features.
- Legal routes remain accessible but are not treated as counsel-approved without owner inputs.
- Session Replay and Autocapture are permanently disabled in the SEO/GEO analytics program.
- Security, compliance, encryption, retention, and deletion claims are not added without evidence.