Data we process

Account identity, workspace configuration, uploaded documents, indexed chunks, operational usage, and security audit events. Chat conversations are answered in the moment and are not stored.

Control and deletion

Deleting a document immediately removes its stored original, its indexed text, and its vectors from D1, R2, and Vectorize. Deletion is permanent — there is no recovery window. Audit events are retained for the life of the workspace.

Telemetry

Logs redact document bodies and secrets. Marketing analytics are aggregate and privacy-first.