Data Privacy Architecture

Effective: January 1, 2026

1. Extreme Local-First Processing

When you upload a chat export, it never leaves your browser directly. We utilize robust client-side JavaScript regex filtering to immediately identify and strip phone numbers, email addresses, and PII right inside your browser memory.

2. Edge Server Abstraction

Your actual chat file never leaves your device. It is parsed entirely locally in your browser. Only anonymous numerical frequencies and aggregated statistics are securely transmitted to our Cloudflare Workers. These numerical payloads are processed entirely in RAM without database or disk volume persistence, and permanently garbage-collected within milliseconds.

3. Third Party Processors

The analytics output is forwarded via secure TLS to the AI provider selected in settings or to our server-side free insights route. We configure privacy-focused headers where providers support them and never send raw message content unless you explicitly enable raw evidence mode.

4. Free Insights Route

When using free insights, anonymous statistics such as message counts, response times, and derived signals are processed by the configured server-side AI route. Raw message content is not sent in the default mode.