Privacy Policy

This policy explains what 9scroll collects and how we handle it. Our core promise: we cannot read the memory content you store. It is encrypted — sealed at rest on the Managed tier, and end-to-end with a key only you hold on the Sovereign tier.

What we collect

Account data: your email address and workspace name. Usage metadata: counts and sizes of writes, timestamps, and your tenant identifier — used for operating and, in future, billing the Service. Technical data: IP address and request logs, used for security and rate limiting.

What we do not see

The content of what your AI stores. On the Managed tier the database holds only ciphertext (XChaCha20-Poly1305). On the Sovereign tier the encryption key never leaves your device, so even a full compromise of our servers yields only unreadable ciphertext. Paths, timing, and sizes are visible to us (needed to route and secure requests); the content is not.

How we use data

To provide and secure the Service, prevent abuse, communicate with you about your account, and improve reliability. We do not sell your data or use your stored content to train models.

Where data is stored

On servers located in the European Union (Frankfurt), operated by our infrastructure provider. Enterprise deployments in other regions (including data residency options) are available on request.

Sharing

We share data only with infrastructure processors strictly necessary to run the Service (e.g. hosting, and — if you enable it — an email provider for verification messages), and where required by law.

Retention & deletion

We keep account and usage data while your account is active. You may request deletion of your account and data at any time by emailing us; we will delete it promptly, subject to any legal retention obligations.

Your rights

Depending on your jurisdiction (including the EU GDPR and Saudi PDPL), you may have rights to access, correct, export, or delete your personal data. To exercise them, contact us.

Cookies

We use a single, essential session cookie to keep you signed in. We do not use advertising or third-party tracking cookies.

Contact

Privacy questions or requests: hello@9scroll.com.