Privacy & Security

All data is stored on secure cloud infrastructure in the United States. We use industry-standard encryption for data at rest and in transit.

• Database: Encrypted PostgreSQL database with regular backups
• Files: Encrypted S3-compatible cloud storage
• Backups: Daily automated backups retained for 30 days
• Compliance: SOC 2 Type II certified infrastructure

• Active accounts:

  Data is retained as long as your account is active

• Canceled subscriptions:

  Content data retained for 90 days after cancellation (in case you want to reactivate). After 90 days, all content is permanently deleted.

• Deleted accounts:

  All data permanently deleted within 30 days of account deletion request

• Billing records:

  Retained for 7 years for tax and legal compliance

You can export all your data at any time:

• Individual entities can be exported in HTML, Markdown, JSON-LD, or CSV formats
• Bulk exports available as ZIP files
• Full account data export available on request (includes all entities, generations, and metadata)
• No lock-in—you own your data and can leave anytime

You have full control over your data:

1. Go to Settings → Account → Delete Account
2. We'll send a confirmation email
3. Once confirmed, all your content is permanently deleted within 30 days
4. Billing records are retained for legal compliance only

• Encryption:

  TLS 1.3 for data in transit, AES-256 for data at rest

• Authentication:

  Secure password hashing (bcrypt), optional 2FA available

• Infrastructure:

  SOC 2 Type II certified cloud providers

• Monitoring:

  24/7 security monitoring and automated threat detection

• Access control:

  Role-based permissions, audit logs for all data access