How this actually works

• Open the companion. There is nothing to sign up for.
• Type, or use the microphone button if your browser supports speech recognition. Replies can be read aloud with the Voice button. Both degrade silently if your browser lacks the API.
• Enter sends, Shift+Enter makes a new line. Every control is reachable by keyboard and labelled for screen readers.
• The tool row above the input opens breathing, the escape room, vent-and-burn, a comfort card, the journal and the privacy panel.
• Personalise is optional. It exists so replies land in the right language, and — only if you switch it on — so an anonymous counter can be attributed to a country.

A safety assessment runs on every message, independently of the companion's personality prompt. If it detects crisis language the request is answered with a separate, much stricter system prompt; and if the model is unavailable at that moment, Pally returns a fixed, deterministic message rather than nothing. A crisis reply always carries a visible reminder that Pally is an AI and cannot contact emergency services.

Honest limitation: detection is heuristic. It will miss things and it will occasionally over-trigger. It is a floor, not a guarantee, and it is not a substitute for a human being.

Every number a business can buy comes from the same pipeline, and the pipeline is deliberately short.

• 1 — Consent. A message contributes only if that visitor switched aggregate signals on.
• 2 — Classification. A broad commercial category is derived. Anything sensitive or uncertain yields nothing at all.
• 3 — Counting. A shared counter row is incremented by one for (country, language, category, topic, intent quality, hourly period). No identifier is written, and no field finer than the hour exists.
• 4 — Suppression. Cohorts below 50 observations are withheld from every view, every total and every export.
• 5 — Rounding. Surviving counts are rounded to the nearest 10 before publication.
• 6 — Coverage. A purchase is only fulfilled when available publishable volume reaches 90% of what was ordered. Below that it stays unfulfilled and refundable.
• 7 — Delivery. A time-limited download token (60 minutes) produces an aggregate-only CSV scoped to the buying organisation.

Categories currently in use: home_and_living, work_and_career, learning_and_education, travel_and_transport, fitness_and_sport, food_and_drink, technology_and_devices, personal_finance, hobbies_and_creativity, pets_and_animals. Signal qualities: general_mention, general_interest, consideration, purchase_intent.

Volumes between tiers are interpolated; above the largest tier the marginal rate of that tier is extrapolated. Every quote returned by the API states which of the three it used and why. Prices are configurable by the platform owner, so the figures above are the current defaults.

• Every advertisement carries a visible "Ad" label. Demo campaigns carry "Ad · demo" so nothing on a screen can be mistaken for real paid inventory.
• Placement is rotation among currently active campaigns, optionally narrowed by the country a visitor chose themselves. There is no profile, no lookalike audience and no third-party pixel.
• Clicks route through Pally so a total can be counted on the campaign. The redirect only accepts https destinations and stores no per-click record.
• Affiliate offers are labelled as affiliate offers. If you buy through one, Pally may receive a commission. That commission never changes what the companion says to you.

• Conversations — never written. Nothing to delete.
• Aggregate counters — kept indefinitely; contain no identifiers.
• Local journal — on your device until you clear it. Never uploaded.
• Business account and purchase records — kept while the account exists.
• Audit log — kept as the accountability record for administrative actions.

When an integration is not configured, the feature that depends on it says so and refuses to proceed. Pally never simulates a successful payment, a delivered dataset or a served advertisement.

• "Pally could not reply" — the model provider failed or timed out. Nothing was stored; retry is safe.
• "Too many messages right now" — the rate limiter. Wait for the stated number of seconds.
• "Integration not configured" — a credential is missing on the server. The platform owner sets it; nothing you can do from the browser.
• A blank tools panel — a browser API your device does not expose. Everything else keeps working.