Privacy policy

Draft. A qualified reviewer has not checked this document. Marked placeholders still need real details, and which privacy laws apply is still an open question for that reviewer.

Version 2026-11-02-draft-2

Who runs this

Milgrom Consulting inc., incorporated in Ontario, Canada. Corporate address: 56A Mill St E., Acton, ON L7J 1H3. Privacy questions and requests: privacy@milgrom.ca.

What is stored

Your account: email address, how you sign in (email link or Google), when you accepted these documents, and sign-in details such as your IP address and browser.
Your brain: pages and their full history, inbox notes, suggestions from AI apps, links between pages, favourites and recent pages, images and PDFs you add, and chat exports you import with what is extracted from them.
Connections: which AI apps you connected, and API tokens (stored only as a hash).
Your Anthropic key, if you save one: encrypted, and used only to run the imports you start. Its last four characters are kept readable so you can recognize it.
Records of activity: what was done, when, and by which app, using ids rather than your name or content; kept for about a year (see "Deleting your account"). Counters for rate limits.
The waitlist, if you joined: your email address and when you agreed to be contacted.

The site has no advertising or analytics trackers.

How it is protected

Data is encrypted in transit and in storage by our hosting provider. Each brain is kept apart from the others by rules in the database, and activity records never include page content. It is not end-to-end encrypted: the service has to read your pages to search them and give them to your AI apps, and the service's owner could technically reach them with administrator access to the hosting account. No system is perfectly secure.

Where your data goes

AI apps you connect. They can read every page in your brain when you use them, and what they read then falls under that company's terms and retention, not this policy. Turn off model training in each app; the Connect guide in the dashboard shows how. You decide what to connect.

Anthropic, if you use your own key. Imported chats you choose to process go to Anthropic under your own account. Anthropic's documentation says batch results stay available for 29 days, and that it doesn't train on API content.

Companies that run the service for us:

Supabase: database, sign-in, file storage and server code (United States).
Cloudflare: delivers the website and passes requests to the service.
Amazon Web Services (SES): sends sign-in and invitation emails.
Google: only if you choose to sign in with Google.

We don't sell your data or use it to train AI models. [PLACEHOLDER: international transfer wording, supplied by the reviewer]

Deleting your account

Account → Delete your account removes your brain at once: pages, history, inbox, suggestions, imports, links, preferences, tokens, app connections and your Anthropic key. Connected apps stop working immediately. Files, your sign-in and any upload still in progress are removed by a job that runs daily. If an import was running on your key, an encrypted copy of the key stays for up to about a day, only to cancel that work.

Backups: deleted data leaves our backups within 7 days of being removed. It can't be removed from a backup sooner. Hosting logs that may include your email address also age out; the sign-in logs are kept for 7 days.

What stays: activity records keep a random id with no name, address or content, and are removed after about a year. Copies an AI app or Anthropic already received stay under that company's terms; ask them or delete them there.

You can download everything first: Account → Download ZIP (page history not included).

If something goes wrong

If a breach affects your data, we'll tell you without unreasonable delay, by email, with what happened, what was involved, what we're doing and what you can do. [PLACEHOLDER: notice wording, confirmed by the reviewer]

Your choices and rights

You can read, correct, export and delete your data yourself in the dashboard. For anything else, write to the contact above. [PLACEHOLDER: rights and legal bases under the laws the reviewer confirms apply, and minimum age]

Other people's health information

The Terms forbid storing other people's patient or health information. Your own notes may include your own health details: consider the warning about connected AI apps first.

Changes

If this policy changes, the dashboard asks you to accept the new version.