Privacy notice

This is a stub, not a full privacy notice. Thaladex is in open development. A full notice will replace this page before public launch. Until then, this is a plain list of what the service keeps.

Your account. Your email address, display name and a hash of your password (Argon2). Signing in creates a session token; its prefix, its creation time and when it was last used are stored.

Your memories. The text your agents write, stored as plain text in a PostgreSQL database on a single server, with a numeric index (an embedding) of each memory and any facts extracted from it. Thaladex does not add its own encryption to stored memories.

Usage records. Timestamps, token identifiers, recall counts and, for some rate limits, IP addresses.

Who can see it. Other accounts cannot: every request is checked against the account that owns the token, and the database enforces the same boundary. The operator of the service has database access and can read what is stored.

Deleting. Deleting a memory or forgetting a single entry takes it out of recall and export immediately. The rows stay in the database; nothing is purged yet. There is no self-service account deletion yet; ask the operator.

See the terms for the same points as commitments.