Documents you upload
Stored in our object storage in the EU and indexed for retrieval. Deleting a document removes it from storage, the index and its vectors. Nothing you upload is used to train a model.
Privacy
What we store, and for how long.
The full policy and data processing agreement are being finalised. In the meantime, this is how the product behaves today.
Conversations
Metadata only by default: request counts, latency and which agent answered. Message text is written only during a time-boxed debug window or when a conversation is flagged as a failure.
Account data
Name, email and the provider you signed in with. We do not store passwords, and we do not store card numbers: payments are handled by our payment provider.
Where it runs
Application, database and storage are hosted in the EU on private networking, with no public database access.
Closing your account
Ask and we erase your documents, indexes, vectors, conversation history and account details within a month. Backups clear on their next rotation, because a backup cannot be edited in place.
What survives, and why
Invoices. EU tax law requires them for years, so they are not ours to delete. We strip everything the law does not ask for, leaving a record that points to no one.
Website analytics
PostHog on EU Cloud and Google Analytics 4 measure site usage. Autocapture also records clicks, form interactions, and the text and attributes of the elements involved. PostHog sets a first-party cookie scoped to commt.co and its subdomains, so one visit stays one visit as you move around the site. GA4 collects EU visitor data on EU servers, then forwards it globally, including to the United States, under the EU-U.S. Data Privacy Framework, with first-party cookies lasting two years. Browsing is not tied to your name or account. Joining the early access list is the one exception: we send PostHog a masked form of your address, such as m***@a***.com, so a signup can be matched to the visit it came from. The address itself goes only to our email provider, never to an analytics tool.
Your cookie choice
Nothing loads until you accept the banner, and declining means no script runs. Change your mind later from Cookie settings in the footer, which brings the banner back. Withdrawing stops future collection, but does not recall data already sent or remove a script already on the page. Your choice lives in your browser, or for that visit only if storage is blocked. This covers the website only, not agents, documents or the product itself.
Questions about data handling, or need a DPA before you sign? [email protected]