We process personal data for the purposes listed below, on the lawful bases indicated (Art. 6 GDPR).

Provide the Service — create and authenticate accounts, run AI agents, sync connectors, deliver features you request. Basis: performance of a contract (Art. 6(1)(b)).
Service operations & security — logging, abuse and fraud prevention, rate-limiting, backups, incident response. Basis: legitimate interests (Art. 6(1)(f)) and legal obligation (Art. 6(1)(c)).
Billing and tax compliance — invoicing, accounting, statutory record-keeping. Basis: contract and legal obligation.
Product analytics — aggregated usage metrics to improve features. Basis: legitimate interests; consent where required for non-essential cookies.
Customer communications — service notices, security alerts, product updates. Basis: legitimate interests; consent for marketing emails, which you can withdraw at any time.
AI model usage — we send your prompts and the relevant context to large-language-model providers strictly to generate the response you requested. The provider and processing region depend on the data-residency tier you choose at workspace creation (see §3.1). We do not permit any of these providers to use your content to train their general-purpose models. Basis: contract.

3.1 Data residency tiers

When you create a workspace you choose a data-residency tier. This determines which AI inference provider receives your prompts and the AWS region in which your account and content data is hosted. You can review your current tier in Settings → Workspace; changes apply to data processed after the change takes effect.

Global (default). AI inference by DeepSeek (Hangzhou, People's Republic of China) under zero-retention API terms; account and content storage in AWS eu-central-1 (Frankfurt). Lowest cost; prompts are processed in the PRC and transferred there under the safeguards described in §8.
EU / Compliance. AI inference via Amazon Bedrock in the European Union (eu-north-1 Stockholm or eu-west-2 London); account and content storage in AWS eu-central-1 (Frankfurt). All processing remains inside the European Economic Area, under the AWS Data Processing Addendum and the AWS Customer Agreement.
US / Compliance. AI inference via Amazon Bedrock in the United States (us-east-1 N. Virginia or us-west-2 Oregon); account and content storage in AWS US East. Intended for customers with U.S. data-residency or sectoral compliance requirements.

Across all tiers, the inference provider operates under written terms that prohibit training their general models on customer content, and we use zero- or short-retention API modes wherever the provider supports them.

Forgot your password?

Reset your password