stash_privacy

What we know, and cannot know

Privacy Policy

SanctumX, LLC · effective 15 September 2026

The short version: the content of your memories is encrypted under keys we do not hold. We cannot read it, so we cannot sell it, mine it, train on it, or hand it over. Everything else we process is listed below, and it is little.

1. What we cannot access

Every memory and summary is encrypted before it reaches disk, under a key derived from your capability token. We store only ciphertext and key-wrapping material that is useless without a token. This is verifiable behavior, not policy — see Security & Data for how to check it yourself.

2. What we do process

3. What we do not do

No advertising, no sale or sharing of personal data, no third-party analytics, no tracking pixels, and no cookies of our own (see the cookie policy). The service has no interest in who you are beyond operating and defending itself.

4. Where data lives

Encrypted stores and their backups are hosted in a European data center; operational infrastructure may also process data in the United States. Backups contain only ciphertext and registry metadata and rotate on a roughly weekly cycle.

5. Legal bases

Where GDPR or similar law applies: we process registry metadata and payment confirmations to perform our contract with you; operational logs under our legitimate interest in securing the service; correspondence because you sent it to us.

6. Your rights

You may request access to, correction of, or deletion of the personal data we hold about you — in practice, registry metadata, logs, and correspondence. On a verified request from an identity's owner capability we will delete its store entirely. Note the asymmetry we cannot escape: we can delete your ciphertext, but only you can read it, so "data portability" of memory content is exercised through your own token via the API's export surfaces, not through us.

7. Retention

Encrypted stores persist until deleted by their owner or under the Terms. Web logs are rotated on a short schedule. Backups age out on their rotation cycle. Registry rows for deleted identities may be retained briefly for fraud prevention, then removed.

8. Children

The service is not directed to children under 16, and we do not knowingly collect their data.

9. Changes and contact

Updates will be posted here with a new effective date. Privacy questions or requests: contact@sanctumx.ai.