Privacy, in plain words
AI which stays private. Here is exactly how.
We would rather tell you precisely what we do than promise something vague. This page covers what stays on your computers, what we store, who can see it, and for how long. The legal version is our privacy policy.
Where your data lives
- On your computersYour files, and the search index built from them. They are never uploaded to us.
- Passing throughWhen someone asks, the question goes to the computers that may hold the answer. The matching passages travel encrypted to our servers and our AI model, and are used for that answer.
- Stored for youYour account and your chat history, encrypted with keys unique to your workspace, plus the usage records and descriptions listed below.
Passages are not kept after the answer, with two small exceptions: the finished answer with short snippets is kept for 10 minutes in case your connection drops, and answers made in deep mode keep short excerpts in your chat history so later questions in the conversation can build on them.
What we never do
- Train AI on your data
- Sell your data
- Send your questions to outside AI services
- Upload your files or their index
Our AI models run on hardware operated by TiDani. To route questions well, we keep simple statistics inside your own workspace, such as which computers tend to hold the answers to which kinds of question. They are never shared with other workspaces.
What we store, and for how long
| What | Why | How long |
|---|---|---|
| Your accountEmail, name, and a one-way scrambled form of your password (a hash). | To sign you in | Until you delete the account, plus 30 days to change your mind |
| Your chat historyQuestions, answers, the file paths of cited sources, and short excerpts from deep-mode answers. | So you can come back to a conversation | Until you delete the conversation or your account. Deleting a conversation is permanent. |
| The latest answerThe finished answer with short snippets of its sources. | So an answer survives a dropped connection | 10 minutes |
| Usage recordsWho asked, when, whether it worked, a one or two word topic, and which computers answered. Never the question or the answer. | Admin insight and fixing problems | Up to 400 days |
| Security logAccount and admin actions, such as changing someone's access. No questions or answers. | Safety, and proof of who changed what | 7 years, also after deletion |
| Computer descriptionsFile-type counts and a numeric summary worked out from the shared files. No text and no file names. | To pick which computers to ask | Until removed, at the latest until the workspace is deleted |
| Workspace detailsPeople, roles, access levels, teams, computer names, and the access rules admins write. | To run your workspace | Until removed, at the latest until the workspace is deleted |
| Technical logsRequest addresses, identifiers and error codes. | To keep the service running | About 7 days |
| BackupsOur hosting provider's copies of earlier data. | To recover from failures | About 30 more days after something is deleted |
Who can see what
The TiDani app on a colleague's computer receives the text of your question when that computer may hold the answer. It sends back only passages you are allowed to see. Workspace admins see people, activity counts and the one or two word topic of each question, per person. They do not see questions, answers or chat history.
How it is protected
Your account, chat history and access rules are encrypted with keys unique to your workspace. Those keys are protected by a master key in Amazon's key service (AWS KMS), and every use of it is logged. This is industry-standard encryption, but not end-to-end: we manage the keys so the service can work for you, which means TiDani can technically decrypt what it stores. Names of workspaces, teams and computers, usage records and computer descriptions are not encrypted with your workspace keys.
Your computer's description
Each computer that shares documents sends counts of its files by type and a numeric summary: a few averages of the numbers our search model works out for its passages. It contains no text and no file names, but it is derived from your documents. It is sent automatically, and there is no switch to turn it off today.
Voice and Google Drive
Voice questions are turned into text by our own speech model, and the recording is not stored. Google Drive is connected read-only: files pass through our servers to your computer and are not stored by us. We keep the access token and the synced file names encrypted, and your Google email address.
Where it is hosted
Your data is hosted in the United States by default. Encryption keys are held in AWS US East, with a copy in Europe. EU-only hosting is not available yet.
Who helps us run it
Cloudflare for hosting and storage (questions, passages and answers pass through its servers while an answer is made), Amazon Web Services for encryption keys, Resend for email, Google if you use Google sign-in or Drive, and Sentry for error reports that contain no content. This website counts page views with Cloudflare Web Analytics.
Questions about your data?
Write to us and a person will answer. To report a security issue, use security@tidani.tech.