Where it lives, why we have it, how long we keep it. The complete inventory — nothing hidden.
UPDATED 2026-08-06
A data map is the artifact your privacy team asks for and every vendor produces reluctantly. Ours is short because our product is simple: an assistant, some files, a subscription, and a monthly donation. This page lists all of it.
Account records
WhatEmail, name (if provided), password hash, workspace membership
WhereSupabase (AWS us-east-1)
WhyTo authenticate you and route your data to your account
RetentionDuration of account + 7 years for finance-record purposes
Legal basis (GDPR)Contract (Art. 6(1)(b))
Chat content
WhatUser prompts, model responses, message timestamps, attached-file references
WhereSupabase (AWS us-east-1)
WhySo you can access your history; so projects retain context
RetentionUntil you delete the chat or the account
TrainingNever used for model training — contractual with Anthropic
Legal basis (GDPR)Contract (Art. 6(1)(b))
Uploaded files
WhatFiles you attach to chats or projects
WhereSupabase Storage (AWS us-east-1, S3-backed)
WhySo the model can read them; so you can reference them
RetentionUntil you delete the file, the chat, or the project
DeduplicationBy content hash; identical file uploaded twice stores once