Privacy Policy

• Your conversations are locked with a key that belongs to your account alone. In our database and file storage they exist only as scrambled text that means nothing without it.
• Nobody who works at Cratonix AI Inc. can read them. Not by opening the database, not by opening the file storage, and not by asking.
• Your conversations leave our systems only to build your memory bank, and only when you ask. Anthropic, whose models do that work, has agreed in writing to keep nothing and learn nothing from it.
• We never train on your data, sell it, or use it for advertising, and we do not track you.
• You stay in control. Delete any file, any memory, or your whole account at any time, and read the log of everything that touched your account.

Cratonix AI is operated by Cratonix AI Inc., a Delaware corporation. For anything in this policy, write to support@cratonix.ai.

Only what the product needs. There is no analytics, advertising, or third-party tracking.

• Your content, encrypted under your key: the export archives you upload, and your memory bank with the working data behind it and any edits you make. Nothing is read from your archives until you ask for a build.
• Records about your account, readable to the service: your name and email; a password, if you set one, as a salted hash; file names, sizes, and dates; sessions and a security log of sign-ins, password and two-factor changes, and file actions, with IP address, browser, and time; two-factor secrets, encrypted, if you turn it on; the email you give us to join the waitlist; and, if you subscribe to Premium, your plan’s standing: whether it is on, when it renews or ends, the last amount paid and any promo code, never a card number.

If you subscribe to Premium, Stripe takes the payment and holds your card; card details never reach Cratonix. We ask for no phone number, date of birth, or postal address, and buy nothing about you.

In plain words: your data sits in a box that only your account’s key opens, and that key sits in a second box that only the running software can open. People who work here can see that the boxes exist and when they were used, never what is inside.

Every account has its own encryption key. Your content is encrypted under it before it is stored and decrypted only while the service works for you. Your key is sealed under a service key that exists only as a secret inside the running service, usable by the code and retrievable by no one; a single sealed copy is kept offline for disaster recovery. The service holds a key for you because it must read your conversations to build your memory bank, so this is not end-to-end encryption in the sense of a key only you hold. Your archives are encrypted by our storage provider under your key on every write, and it keeps no copy of the key. Reading your content through our database or file storage yields ciphertext; the one way to change that is a change to the service’s code, and every deployment is recorded. Under legal compulsion we could be required to make such a change. Error reports carry no content, and your security log records that something happened, never what it said.

In plain words: turning your chats into a memory bank is done by our software with help from an AI model made by Anthropic, which keeps none of it. If you never press build and never switch on Live Sync, nothing is sent anywhere.

Building your memory bank sends the conversation text needed for it, and your first name, to Anthropic’s API under Anthropic’s Zero Data Retention commitment for our production use: nothing we send or receive is retained beyond the request, and none of it is used to train models. What comes back is stored encrypted like everything else. Taking your memory into another assistant with Migrate happens through text you copy and paste yourself; Live Sync, below, is the one case where your own browser sends on your behalf.

Live Sync, if you switch it on, is our browser extension working inside your own browser, signed in as you. For each assistant you switch on, it reads your recent threads there and stores them encrypted in your vault, where they feed your memory bank and knowledge graph like any upload. It also writes a short note about what changed in your other assistants into a chat of that assistant’s own, where that assistant’s maker holds it under its own terms. The notes are written with Anthropic’s model under the same Zero Data Retention commitment. Switch an assistant off, disconnect the browser, or remove the extension, and it stops at once.

• Privacy filters. Under Settings, Privacy, have identifiers such as card numbers, government ID numbers, and API keys kept out of your memory bank and out of what is sent for processing, and keep sensitive topics such as health, religion, and politics out of the bank. Both are reversible.
• Your bank and files are yours. Edit, hide, or pin any memory, rewrite your portrait or the bank’s text, download any file, and delete any of it.
• Your account is yours to close. Delete it from Settings at any time, and review or sign out any device before then.

Your data is stored in the United States and reachable only over HTTPS; every download is authenticated and streamed through the application. A small number of providers process data on our behalf under data processing agreements: Cloudflare, for hosting, database, and file storage, which holds your content only in encrypted form; Resend, for transactional email, which sees your address and the message but never your files or bank; Stripe, for Premium payments, which sees your email, your payment details and the amounts, and never your files or your bank; Anthropic, as described above; and Google, only if you sign in with it.

Your files stay until you delete them. A deleted file can be restored for 30 days and is then permanently removed, along with what your memory bank drew from it; you can also delete one permanently at once. Deleting your account removes everything, including your account key, immediately and irreversibly; a Premium subscription is cancelled at once, and Stripe keeps its invoice records for as long as the law requires. Security log entries are kept briefly where needed to investigate abuse.

You can change your name, download any file, export your memory bank as text, sign out devices, review your activity, and delete your account yourself at any time. Depending on where you live, you may also have the right to a portable copy of your data, to correction, to restriction of processing, or to complain to a supervisory authority. Write to support@cratonix.ai and we will respond within 30 days.

One httpOnly, secure, same-site cookie holds your session; a second remembers a trusted device for two-factor sign-in for 30 days. There are no advertising or analytics cookies, so there is no consent banner. Cratonix AI is not intended for anyone under 16; if you believe a child has created an account, write to us and we will remove it.

Material changes are dated above and emailed to registered users before they take effect. This page is kept current with what the code actually does.