Cornelius privacy & data

We are the data controller for the personal data described in this policy.

Your email address, your name if you give one, and an identifier from the sign-in provider you use.

Emails you send us, and our replies.

Standard server logs: IP address, browser or client identifiers, request times and error records.

With each call, ChatGPT sends a conversation identifier, your locale and an approximate location.

To run the service. Storing your memory and serving it back to your agent when it calls our tools; keeping versions so every change is reversible.

If the daily cycle has not run for more than 36 hours, we send you a short nudge email with reconnect guidance.

Every write passes a pattern scan for injection attempts; suspicious spans are stored but flagged, never silently absorbed.

looking at aggregate, de-identified usage (for example how many people complete setup, or how often each tool is called and how fast it answers) during the beta

Memory and account data stay as long as your account exists.

After you delete your account, live data is removed within 30 days and backups are purged within a further 30 days.

Server logs are kept for 90 days, and tool-call records are kept for the life of your account and removed with it.

Hashed conversation identifiers are kept for 30 minutes.

Our infrastructure is located in the United States.

Where personal data is transferred across borders we rely on appropriate safeguards such as standard contractual clauses.

Infrastructure providers. Servers and logs at Render (United States); the database at Neon (United States); sign-in at WorkOS (United States); and Resend (United States) for the watchdog and confirmation emails.

Deleting your account removes all data within 30 days and we confirm by email.

Depending on where you live you may also have rights to access, portability, restriction and objection, and the right to complain to your data protection authority.

The dashboard produces a zip of every memory file, every earlier version and the raw event log.

Tell your agent in chat and it updates its files, keeping the old version visible; or edit an agent-writable file in the dashboard.

We do not sell personal data and we do not share it with advertisers or data brokers.