Privacy

Zero-Data-Retention (ZDR)

All AI requests run with zero data retention:

• Requests go through providers with no data storage.
• No training on your content.
• No logging of your content at the provider.

Hosting & GDPR

• Data stays in the EU (Hetzner, Germany).
• GDPR-compliant.

Account & Security

• Authentication via JWT; sign in with email/password, Google, or GitHub.
• Row-Level Security (RLS) on all tables, with access limited to your own data.
• No secrets in the client; server-side validation of all inputs.
• Rate limiting on all API routes; origin lockdown via Cloudflare Tunnel.
• Uploaded files and artifacts are stored in private storage buckets (signed URLs).

Deleting Your Account

When you delete your account, all of your own data (chats, projects, files, artifacts, research documents, agents) is removed; an active subscription is canceled beforehand.