Privacy
Privacy policy
What we collect
Your email address and name, to sign you in and address you. The documents you send, upload or import, and everything derived from them: titles, facts, the people and things they mention, dates. Sign-in and activity records in the audit log, including IP address and browser, encrypted. Payment details are handled by Stripe at launch and never touch our servers.
What we do with it
We read your documents to file them, extract facts and dates, and answer your questions. That is the service. We do not sell data, share it with advertisers, or use your documents to train anything.
Who else sees it
Documents are read by Claude through the Anthropic API. API inputs are not used to train models; Anthropic's standard retention is 30 days. Infrastructure runs on Amazon Web Services in the United States (us-east-2). Email is sent through Amazon SES. Cloudflare sits in front of the application. People you invite to a family or business see what you grant them, and every access is in the audit log.
How it is protected
Per-document and per-account encryption with the master key in AWS KMS; identifiers encrypted with a blind index and redacted from the search index; tenant isolation enforced by the database; passkey sign-in; an append-only audit log. The security page has the full description.
Getting it out
Export your originals as a folder tree with your facts alongside, at any time, on any plan.
Deleting
Deleting a document destroys its encryption key immediately. Deleting an account destroys the account key on day one; data is purged within 30 days and backups roll off within 35.