What we know, and cannot know
SanctumX, LLC · effective 15 September 2026
The short version: the content of your memories is encrypted under keys we do not hold. We cannot read it, so we cannot sell it, mine it, train on it, or hand it over. Everything else we process is listed below, and it is little.
Every memory and summary is encrypted before it reaches disk, under a key derived from your capability token. We store only ciphertext and key-wrapping material that is useless without a token. This is verifiable behavior, not policy — see Security & Data for how to check it yourself.
No advertising, no sale or sharing of personal data, no third-party analytics, no tracking pixels, and no cookies of our own (see the cookie policy). The service has no interest in who you are beyond operating and defending itself.
Encrypted stores and their backups are hosted in a European data center; operational infrastructure may also process data in the United States. Backups contain only ciphertext and registry metadata and rotate on a roughly weekly cycle.
Where GDPR or similar law applies: we process registry metadata and payment confirmations to perform our contract with you; operational logs under our legitimate interest in securing the service; correspondence because you sent it to us.
You may request access to, correction of, or deletion of the personal data we hold about you — in practice, registry metadata, logs, and correspondence. On a verified request from an identity's owner capability we will delete its store entirely. Note the asymmetry we cannot escape: we can delete your ciphertext, but only you can read it, so "data portability" of memory content is exercised through your own token via the API's export surfaces, not through us.
Encrypted stores persist until deleted by their owner or under the Terms. Web logs are rotated on a short schedule. Backups age out on their rotation cycle. Registry rows for deleted identities may be retained briefly for fraud prevention, then removed.
The service is not directed to children under 16, and we do not knowingly collect their data.
Updates will be posted here with a new effective date. Privacy questions or requests: contact@sanctumx.ai.