Security and data
This page states current product boundaries. It does not promise capabilities that are not shipped.
Transport and secrets
Public sites use HTTPS. Login refresh tokens are stored only in HttpOnly cookies. Third-party secrets stay on the server and never enter workflow graphs, templates, or browser storage.
Retention
Companion hot history is isolated by user and character for about 72 hours, with no long-term semantic memory; custom characters stay in this browser. Simulation worlds are kept for about 7 days. Credit ledger entries and payment orders are retained for reconciliation.
How to delete data
Open a support ticket to request account or conversation deletion. Ledger and order records are not deleted before identity is confirmed.
Support