Data handling & deletion
Stored conversations are not a zero-retention service.
What persists
Accounts, conversation history, durable events, approvals, evidence and billing records serve different purposes. Hosted inference may involve the disclosed model processor. No unverified training, geographic or zero-retention guarantee is made.
Private source files
Uploads are stored privately and indexed within authorized tenant/project scope. Removing a source also removes derived responses and reports from the active application store. Cleanup follows durable jobs; backup expiry is governed separately.
Account export and deletion
Account settings provides a full export job plus a quick metadata index. Permanent deletion requires explicit confirmation and current authentication; active subscriptions must be canceled first. Required finance/security exceptions and backup expiry remain disclosed.
Policy review
Read the current Privacy, Terms and Trust pages before sharing sensitive material. Legal drafts and missing operational commitments are identified rather than presented as completed certifications.