Security and privacy
This is a product you point at the things you would not paste into a chatbot: your clients, your commitments, what people told you in confidence. So the design decisions that protect it are worth showing you rather than summarising in a sentence.
Isolation is not a permission check bolted on top. Every path, every search vector, and every row carries your account id, so a query that forgot to filter returns nothing rather than someone else's notes.
Your files live under a prefix belonging to your account. A request for a path outside it is a 404, not a permission error, because the path never resolves in the first place.
The search index filters by account id server-side, and the code checks it again on the way back. If the first ever regressed, the second turns it into worse search results instead of a leak.
| Surface | What we ask for | What we deliberately do not |
|---|---|---|
| Calendar | calendar.readonly, one scope | No write access. We cannot create, move, or delete anything on your calendar. |
| Nothing. You forward to an address. | No mailbox access at all. Reading your inbox would need a Google scope we refuse to request. | |
| Google account | Your address, to label the connection | No Drive, no Contacts, no Gmail, no profile data. |
| Sign-in | A one-time code by email | No password. There is nothing to reuse, leak, or steal from us. |
The email point is worth dwelling on. Reading your Gmail would be the easy way to build this, and it is why several competitors want that permission. It is also a scope that would put a copy of your entire inbox inside our systems. Forwarding is slightly more work for you and dramatically less exposure, so that is the trade we made.
HTTPS on every request. Plain HTTP permanently redirects rather than answering.
Your calendar access and refresh tokens are encrypted with AES-GCM before they are stored, under a key held separately from the database.
End-to-end encryption would mean we could not index or search your notes, which is the entire product. We would rather tell you that than imply a protection you do not have.
Your content is never pooled with another user's, never sold, and never used to train a model. The AI providers that generate your answers process your content under commercial terms that prohibit training on it. This is a contractual and architectural position, not a setting you have to find and switch off.
Hostile content cannot make it act. When answering, your notes are treated strictly as data, and the model reading them has no tools. Something malicious pasted or forwarded into your vault can at worst produce one wrong answer. It cannot send, change, or reach anything.
Read the privacy policyEvery security promise on this page is something you are trusting us about. The one you do not have to trust is the exit: your notes are plain markdown files, exportable in full in one click, on any day including your last. They open in free software forever, and any AI model in ten years will still read them. If we ever became a company you did not want to deal with, you would not be negotiating with us about it.
On Cloudflare's network, in object storage and a database scoped to your account id. We run the infrastructure; you can pull everything out of it in one click at any time.
Technically yes, and anyone who tells you otherwise about a hosted product is being loose with the truth. Support access is deliberately conspicuous: opening your account puts a red banner across every page saying a support session is active, and those sessions expire after eight hours. We do not read accounts without a reason to.
If that is unacceptable for your work, this is the wrong product and we would rather you knew now.
Your notes, the search index built from them, your settings, and any connected calendar tokens are removed. Export first: once it is gone we cannot get it back for you.
No, and the design is the reason rather than a filter. Notes are treated strictly as data when answering, and the model that reads them has no tools available to it. The worst a hostile note can do is make one answer wrong. It cannot send anything, change anything, or reach another account.
No. We are a small operation and buying an audit would not make the product safer, it would make it more expensive. What we have instead is described above, and you can verify most of it yourself from the outside.
You keep working, because your notes are plain markdown files and you can hold a copy of all of them today. That is the honest answer to a question most vendors handle with reassurance instead of structure.
Fourteen days, no card, and everything you put in comes back out whenever you ask.