Privacy policy

Information we collect

We process the account information you provide, including your email address and account identifier. If you use Google sign-in, we receive the identity information Google shares for authentication, such as your name, email address, profile image and Google account identifier.

When you use the workspace, we process the files you upload and their associated information, including names, paths, sizes, types, versions, extracted text where supported, project memberships, invitations and connection permissions. Files may contain personal information about you or other people. Choose what you upload and share accordingly.

Our services and infrastructure providers also process technical information needed to operate and secure the service, such as IP addresses, request and authentication logs, browser information, timestamps and errors.

How we use information

We use this information to authenticate accounts, store and retrieve files, manage project access and file versions, enable the connections you authorize, send account and security messages, prevent misuse and diagnose operational problems.

Supported files may be processed to extract text for search and retrieval. Files for AI currently provides source-file storage and retrieval, rather than a built-in AI chat or semantic search service.

Google sign-in

Google sign-in is used to identify you and establish your Files for AI session. Signing in does not grant Files for AI access to your Google Drive files, Gmail or other Google account content. We use the Google identity information received through sign-in for account authentication and management.

You can review or remove the connection in your Google Account connection settings. Removing it does not itself delete files already uploaded to Files for AI.

Files, collaborators and AI connections

Files are stored in a private object store. Access through Files for AI depends on project membership and the permissions granted to a connected assistant or application. People you invite and assistants you authorize can access information within those permissions.

When you authorize an external assistant to retrieve files, file contents and related information can be sent to that assistant's provider. That provider's own privacy policy and settings govern its use and retention of the information it receives. Review those terms before sharing sensitive files. Revoking a connection prevents subsequent authorized access through that connection; it cannot recall copies already received.

The hosted service cannot browse folders on your computer by itself. The desktop app is in development. Local-folder access, cloud uploads and consent to desktop AI processing are separate choices; selected file information may be sent to an AI provider when you choose an AI feature.

Service providers

We use Cloudflare for the website and network services; Railway for the backend; Tigris for object storage; Supabase for authentication and the database; and Resend for account email. These providers process information needed to deliver their services. Google also processes information when you choose Google sign-in.

Information may be processed in countries other than where you live. The production database and backend are configured in US regions; network, email and other provider operations may take place elsewhere.

Browser storage

We use cookies or similar browser storage to maintain authentication sessions and support the application. You can clear or block browser storage using your browser settings, but this may sign you out or prevent features from working.

Retention and your controls

We retain information as needed to operate the service, maintain account and project records, secure the system and meet applicable obligations. File versions, deleted-file records, operational logs and backup copies may remain after an item is removed from the workspace; removal from the interface is not a promise of immediate erasure from every system.

You can download files you are authorized to access and use the available project controls to manage files, memberships and assistant connections. Your role determines which controls are available. Keep independent copies of information you need.

Security and disclosures

We use access controls and encrypted connections to protect information. No storage or transmission system is completely secure. We may disclose information where required by law or where necessary to investigate misuse and protect the service or its users.

Changes to this policy

We may update this policy as the service changes. The date above identifies the current version.