Privacy Policy

1. What we collect

Account: e-mail, name and password hash (managed by our authentication provider).

Archive: the conversation transcripts your sync client uploads (redacted on your machine), the memories your AIs save, and metadata (project names, git remotes, timestamps, tool names).

Operational: plan/billing status via Stripe, and minimal logs to run the service.

2. What never reaches us

Credential files (.credentials.json, auth.json, key material) are on a deny-list the sync client never reads.

Secrets matched by the redactor are replaced on your machine with irreversible markers before upload.

On the on-premise edition, conversations never touch our infrastructure at all — telemetry is limited to version and seat count.

3. How we use it

Exclusively to provide the service: storing, indexing for your search, and serving recall to your authenticated tools.

We do not train models on your content, do not sell it, and do not share it except with the processors below.

4. Processors

Supabase (database), Vercel (hosting), Stripe (billing), Resend (transactional e-mail). Each receives only what its function requires.

5. Retention and deletion

Your archive persists until you delete it (per project/session or the whole account). Backups expire within 30 days.

6. Your rights

Export, correction and deletion, at any time, via the dashboard or support@handoff-it.com.