Skip to content
Back to Home

Privacy Policy

Last Updated: March 25, 2026

Note: In case of any discrepancy between the English and translated versions, the English version shall prevail.

1. Information We Collect

We collect information you provide directly to us when you create an account, upload documents, use our chat features, or communicate with us. This includes your name, email address, and the content you choose to store on our platform. We also automatically collect certain information about your device and how you interact with our services.

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services, to process your transactions, to send you technical notices and support messages, to communicate with you about products and services, and to monitor and analyze trends, usage, and activities in connection with our services.

3. Information Sharing

We do not sell your personal information. We may share your information with third-party service providers who perform services on our behalf, such as hosting, data analysis, and customer service. We may also share information when required by law or to protect our rights and the safety of our users.

4. AI Data Processing

When you use Tatsulok's AI features, your prompts and uploaded documents may be sent to third-party AI model providers (such as Anthropic, Google, and OpenAI) via OpenRouter for processing. All AI requests are routed exclusively through Zero Data Retention (ZDR) endpoints. This means providers do not store, log, or retain your prompts, documents, or model responses after processing. Your data is never used to train, fine-tune, or improve any AI model. We enforce this through infrastructure-level controls: all training endpoints are disabled, prompt publishing is disabled, and only ZDR-certified endpoints are used.

5. Data Security

Documents are stored on Cloudflare R2 with AES-256 encryption at rest. All data in transit is protected by TLS 1.3. Document embeddings are stored in Convex's managed database infrastructure, also encrypted at rest. AI requests are processed through Zero Data Retention endpoints, ensuring no data persists on provider infrastructure after processing. While we implement strong security measures, no internet or electronic storage system is 100% secure, and we cannot guarantee absolute security.

6. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

7. Your Rights

You have the right to access, update, or delete your personal information at any time. You can do this through your account settings or by contacting us directly. You also have the right to opt-out of certain uses of your information and to request that we stop processing your data.

8. Children's Privacy

Our service is not intended for use by children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the 'Last Updated' date. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at legal@tatsulok.com.