Privacy policy
How this installation handles account details, conversations and provider requests.
Owner review required
The operator must identify its legal name and contact address, set retention periods, describe its hosting and email providers, and adapt this draft to its users and jurisdiction. This text describes the application's default behavior and does not claim legal compliance.
Information stored by the application
The application stores account information, hashed passwords, session records, conversations, project and assistant instructions, uploaded files, optional memory notes, provider connection details and usage information returned by providers. API keys and configured service secrets are encrypted at rest using the installation's application key.
Information sent to other services
When you send a message, the selected provider receives the relevant conversation, instructions, enabled memories and supported attachments. Optional search sends a query to Brave Search. Reading a public page contacts that website from the server. Google or GitHub sign-in shares the account information needed for authentication. Transactional email uses the operator's configured email service. If enabled, Cloudflare Turnstile processes a browser verification request.
Each service applies its own terms and data practices. This installation does not control how a provider retains requests, whether a particular account is eligible for reduced retention, or whether submitted data may be used for training. Review your provider settings before sending sensitive information.
Access and security
Workspace routes enforce account ownership. The admin panel does not display private conversations or users' API keys. People with access to the hosting server, database, application key or backups may nevertheless access data. Encryption at rest is not end-to-end encryption.
Session cookies support authentication and request protection. The default build includes no advertising or analytics scripts. The operator must update this policy if it adds them.
Your controls
You can remove conversations, uploaded files, provider connections and memories, download an account data export, or delete your account. Files can be downloaded separately. Deleting data from this application does not delete copies already processed by a provider. The operator must explain any backup retention and deletion schedule.
Contact and changes
Use the contact page to reach this installation's operator. The operator should publish a review date and notify users of material changes as appropriate.