Squadron · Private pilot
Privacy & retention
This page describes how this deployment is actually configured — not boilerplate. If the configuration changes, this page changes first.
What is stored, and where
- Account: your email address and display name, used to sign you in.
- Chats, files and memories: stored in our database and file storage, on hardware we own and operate. They're used only to provide the product (threads, document search, memory).
- Usage records: for each request, the model, token counts and timestamps, linked to your account email — used for budgets and operations. Message content is not written to these logs.
Who else is involved
- Cloudflare carries all traffic to Squadron (TLS, security filtering) and runs the sign-in step, so it processes your email address, IP address and the traffic itself in transit. It also stores our encrypted backups, which it cannot read.
- Web search: when a chat uses web search, the search terms are sent to public search engines through a search proxy we run. The engines see the query and our server's address — not your identity or your IP address.
- No third-party AI providers are involved: every response is generated on our own accelerators. There are no analytics or advertising systems.
Who can read your data
This is a single-operator pilot. The operator is the only administrator, can access stored chats, and may do so for operations or support. Nobody else has that access.
Retention, deletion & backups
Your data stays until you delete it or your account is removed. You can delete chats and files in the interface; to delete your account and everything in it, email the operator.
Nightly backups are encrypted before they leave our hardware; the decryption key is held by the operator and is not stored on the server. Deleted data can persist in backups until they expire: local backups after at most five weeks, off-site copies after 35 days.