Privacy · Data boundaries
Local files do not become cloud data by signing in.
This page explains the current product boundary in plain language. Feature-specific notices take precedence when a transfer is explicitly requested.
Local library
Your knowledge base stays on the selected device
Opening or indexing a local folder does not automatically upload its contents.
Account
Sessions and device records
Web sessions use Secure, HttpOnly, SameSite cookies and CSRF protection. Account services may store identity, membership, and authorized device records.
AI providers
External processing follows explicit actions
When you choose an external AI provider, the selected context may be transmitted according to that provider and feature configuration.
Deletion
Account deletion and local files are separate
The current account deletion flow includes a seven-day cooling period. Deleting an account does not delete folders stored on your device.