Privacy
Account
What is stored, what is not, and how to get rid of it.
What is stored
- Memories you or your tools explicitly save
- Documents you upload, and text extracted from them
- Content from connectors you set up
- Which tool asked for what, so the dashboard can show you
What is not
- Conversations as written. Your messages and the assistant's replies are read to find what is worth keeping, and are not stored. What is stored is the short statements taken from them. Some come from a reply, such as a date the assistant confirmed.
- Anything from a site you have not enabled. The browser extension is inactive on sites you have not turned it on for.
- Your keystrokes. The extension reads a message when you send it, not as
you type. The exception is a message with
@remindin it, which is looked up while you write so the answer is ready when you send.
Isolation
Every request resolves to your account before any data is read, and every query is bound to it. Accounts cannot see each other's memories, threads, documents or usage. This is verified continuously as part of our test suite rather than assumed.
Connector credentials are encrypted before storage and are never returned by the API.
Deleting things
| One memory | Memories in the dashboard, or Undo when it is captured |
| Many at once | Describe what should go, you see what would be removed before confirming |
| A saved view | Deletes the saved search only, memories stay |
| A document | Removes the file and everything extracted from it |
| A device | Connected tools → Revoke |
Deleting memories or a document is immediate and permanent.
Data we do not use
Your content is not used to train anything.
Questions
This is early access, and privacy questions deserve direct answers rather than a policy page. Ask.