Privacy Policy

1. What we collect

Account data: your email address, display name and authentication credentials, managed by our identity provider in a dedicated database schema.

Workspace content: the documents you upload, the chunks and embeddings derived from them, your conversations, generated insights and reports, and workspace settings including encrypted provider API keys.

Usage data: per-request metadata such as timestamps, token counts, model identifiers, latency and error status, used for metering, rate limiting and cost dashboards.

Operational logs: request identifiers and organization identifiers attached to structured logs for debugging; we do not log document contents or credentials.

2. How we use it

To operate the service: indexing your documents, answering questions, generating summaries, extractions, comparisons and reports.

To meter and limit usage per workspace, and to show you what you spent.

To keep the service secure and debug it. We do not use your document content for advertising, and we do not sell data.

3. AI providers

To answer questions, relevant excerpts of your documents are sent to the AI provider configured for your workspace (by default Anthropic, for Claude models), together with your question or task instruction.

If you provide your own API key in Settings → AI Provider, calls are billed directly by the provider under your account, under that provider's data terms.

We instruct providers through API configuration not to use submitted content for training where the provider offers such a control.

4. Storage and retention

Documents are stored per workspace in isolated storage paths; metadata and embeddings live in the workspace's own rows in PostgreSQL.

Deleting a document deletes its file, chunks and embeddings. Deleting a workspace deletes all of its data.

Backups, where maintained, age out on the platform's standard schedule; contact us for expedited deletion.

5. Sharing

We do not sell or rent your data. We share data only with the infrastructure providers needed to run the service (hosting, database, object storage, email delivery) under their data-processing terms, and with the AI provider when answering your requests.

We may disclose information if legally required, and will notify affected workspace owners where lawful.

6. Your rights

You can access, correct, export and delete your data. Workspace owners can delete documents and workspaces directly in the product; account deletion removes your identity and membership records.

EU/UK residents have additional rights under GDPR (access, rectification, erasure, restriction, portability, objection). Contact privacy@pgsofts.org and we will respond within 30 days.

7. Changes

If this policy changes materially, we will notify workspace owners by email before the change takes effect.