Privacy

What is stored

• Your account: email address and a hashed password.
• Your work: notebooks, the files and links you add, the text extracted from them, chats, notes and Studio outputs.
• Connections you set up: for example a Nextcloud address and app password, or a search provider key. The Nextcloud app password and sign-in tokens for connected services are stored encrypted.
• Logs: the server logs requests and errors for troubleshooting, with secrets removed. If the app crashes in your browser, it sends an error report without your documents.

What is sent to other services

Some features need an outside service. Only what that feature needs is sent, and only when you use it.

• AI models. To answer a question or build a Studio output, your question and the relevant passages from your sources go to the language model provider configured for the workspace. Audio and video narration is spoken by a text-to-speech model.
• Cloud parsing. If you choose the Cloud parser, the file is uploaded to Datalab to be read, and with the vision model on, the images inside it go there too. A few file types Datalab can't open, and any file it fails to read, go to LlamaCloud. The Local parser reads it on the server instead.
• Image understanding. If you turn on the vision model, images from your files are sent to that model to be described.
• Research and web answers. Searches send your query to the provider you picked (for example PubMed, arXiv, Google Scholar, Exa or Tavily). General web searches go through a private SearXNG instance.

The search index is built on the server with a BGE-M3 embedding model, so indexing your documents normally sends them nowhere. If that local service is down, the same model on OpenRouter is used as a fallback, and the text being indexed is sent there.

What is not done

• No advertising, and your data is not sold or shared for marketing.
• No analytics or tracking scripts are loaded.
• Your documents are not used to train models by this service.

Cookies and browser storage

Signing in sets two cookies that keep you signed in. Your theme, language and a few layout choices are kept in your browser's local storage. There are no third-party cookies.

Payments

Payments are made in cryptocurrency through our own BTCPay Server (once payments open): it records the invoice amount and whether it was paid, and the payment goes straight to our wallets on the blockchain, so no bank or card details are involved. Card payments are not offered; if they are added, this page will say how they are handled before they open.

Deleting your data

You can delete sources, outputs, notes and whole notebooks in the app at any time. To close your account and remove everything, write to the address on the contact page. Server backups may keep copies for a while after deletion.

Questions

Ask anything about this policy at the address on the contact page.