Your Data. Your Library. Your Control.

Files are stored on Cloudflare R2, an object storage service. Application data (threads, memory, settings) is stored in Convex.

Files in Cloudflare R2 and application data in Convex are encrypted at rest with AES-256. Every connection is encrypted in transit with TLS.

Embeddings (the vector representations derived from your files, used for search) are stored in Cloudflare Vectorize, which uses Cloudflare-managed encryption at rest.

You, and anyone you choose to share with. What you upload to your library is private to your account by default. Sharing is explicit, and you can remove access at any time.

Engineer access to production data is least-privilege, audit-logged, and limited to operational tasks such as incident response and investigating feedback you submitted.

Authorized staff may access account data for support and security. Our support tools do not let them send or schedule your email drafts, disconnect your accounts, change your files or events, or chat with Tatsu as you.

We do not sell your data.

Your workspace is never sent to training datasets. The model providers that answer your chat requests commit to no training and to keeping none of your content afterwards. Four narrower paths run outside that routing and are named below.

Tatsulok sends every chat, embedding, and spoken-audio request only to OpenRouter endpoints listed for zero data retention (ZDR). Each call carries a data-collection denial and a ZDR-only flag, models are pinned to routes we have audited against OpenRouter's published ZDR endpoint list, and a CI check gates any route change. Endpoints in that program commit not to retain your prompts, attachments, or responses after processing. OpenRouter keeps operational metadata (token counts, latency, model ID) for billing and abuse prevention.

This is configuration at the two layers we control: our organization-level policy and the per-request flags. The retention behavior itself runs on provider infrastructure, so what we can state precisely is that we never send a chat request to an endpoint outside that program. Our OpenRouter configuration sets four privacy controls:

• Paid endpoints that may train on inputs: disabled
• Free endpoints that may train on inputs: disabled
• Free endpoints that may publish prompts: disabled
• ZDR Endpoints Only: enabled

Paths that sit outside that routing, named so the claim above stays exact: voice input is transcribed by OpenAI, web search sends your query text to Serper, document text extraction runs on Modal, and search reranking runs on Cloudflare Workers AI, a processor already listed rather than an OpenRouter ZDR endpoint. Each is listed with what it receives in our Privacy Policy.

When you delete a document, it moves to Trash. Until it is deleted for good, you can restore it.

Items in Trash are deleted after at least 30 days, or at once if you permanently delete them from Trash. Deletion removes:

• The stored file (Cloudflare R2)
• The search index built from it
• The embeddings derived from it

Permanent deletion cannot be undone.

If you delete your account, it is scheduled for deletion 30 days after you ask. Until then you can cancel, and you can export your workspace from Settings. Once the deletion runs, it cannot be undone.