Privacy

What this service stores

The documents and pages an organization gives it, the text extracted from them, the vectors derived from that text, and the records of who did what.

Each organization's content is isolated by a filter applied before any search runs, and a request for another organization's data is answered as though it does not exist — because from the caller's side it does not.

What it does not store

Search queries. Searches are recorded in the audit log with who ran them, which datasets and how many results — not what was asked.

Provider keys in readable form, and passwords in any form. Keys are encrypted at rest; passwords and tokens are stored only as hashes.

Deletion

Deleting an organization removes its datasets, files, vectors, stored objects and audit records, then checks the external systems again and writes a receipt recording whether that check passed.

Accounts are not deleted with an organization: a person may belong to several, so their membership of that organization is what goes.