Privacy Policy

Account information

When you create a Corpus account, we collect your email address.

Your password is processed by our authentication provider and stored as a password hash. Corpus does not store your password in plaintext.

Information you add to Corpus

We store the information you intentionally save to Corpus. This may include preferences, personal details, work information, interests, relationships, writing preferences, health-related context, or other information you want your AI to know about you.

You choose what information to store.

Connection information

Corpus creates a private connection credential that allows AI services you authorize to access your Corpus.

You should treat your Corpus connection link or credential as private and should not share it with anyone you do not want to have access to your Corpus.

Technical information

Our infrastructure providers may automatically process technical information necessary to operate and secure the service, such as IP addresses, browser or device information, timestamps, request paths, and diagnostic or security logs.

Corpus does not currently use advertising pixels or third-party behavioral analytics.

• Create and maintain your account.
• Store the information you choose to add to Corpus.
• Retrieve relevant information when an AI service you have connected requests it.
• Authenticate and secure access to Corpus.
• Operate, maintain, troubleshoot, and improve the service.
• Provide customer support.
• Send transactional emails related to your account.
• Detect abuse, fraud, security incidents, or unauthorized access.
• Comply with applicable law.

Corpus does not sell your personal information.

We do not use your personal information for advertising.

We do not share your personal information with advertisers.

Corpus does not use the information stored in your Corpus to train AI or machine-learning models.

When you connect Corpus to a third-party AI service, such as ChatGPT or Claude, information may be transmitted to that service when it requests relevant context from Corpus.

Once information has been provided to a third-party AI service at your direction, that provider's own privacy policy, terms, account type, and settings govern its handling of the information. Depending on the provider and your settings with that provider, your information may be used by that provider for purposes including model improvement or training.

Corpus does not control the privacy or training practices of third-party AI providers.

Corpus is designed to respond when an authorized AI service requests relevant information from your Corpus.

We do not intentionally create or maintain a history of your conversations with third-party AI services or a history of the prompts you send to those services.

Our infrastructure providers may maintain technical logs associated with requests to Corpus as part of operating, securing, and troubleshooting their systems.

We use third-party service providers to operate Corpus, including providers of database and authentication infrastructure, application hosting, and transactional email delivery.

These providers may process personal information as necessary to provide their services to Corpus and to support the operation, security, and maintenance of the service.

We may change or add service providers as Corpus develops. If a change materially affects how your personal information is handled, we will update this Privacy Policy.

You control which supported AI services you connect to Corpus.

When an authorized AI service requests relevant context, Corpus may provide information from your Corpus to that service.

Disconnecting an AI service removes that service's access to your Corpus. Disconnecting an AI service does not delete the information stored in your Corpus.

Third-party AI services are independent services. Their privacy, security, model-training, and data-retention practices are governed by their own policies, account types, and settings.

Because Corpus is designed to store personal context, you may choose to save information that is private or sensitive, including health-related or other personal information.

You should consider carefully what information you choose to store.

Corpus is not intended to be a password manager, financial credential vault, or specialized medical-record system.

Do not store passwords, Social Security numbers, credit or debit card numbers, bank account credentials, PINs, authentication codes, API keys, private keys, or similar secret credentials in Corpus.

We retain your Corpus information while your account remains active or as necessary to provide the service.

You may request deletion of your Corpus account and stored information by emailing support@withcorpus.com.

We will delete your account and associated personal information from our active systems within 30 days of a valid deletion request.

Some information may remain temporarily in routine backups, security logs, or other infrastructure systems until those records expire through their normal retention cycles. We may also retain limited information when required by law or reasonably necessary to address fraud, abuse, security incidents, or legal claims.

Self-service account deletion and data export are not currently available. We plan to add these capabilities as Corpus develops. Until then, deletion requests can be made by email.

We use third-party infrastructure providers and access controls intended to protect the confidentiality and security of information stored in Corpus.

Access to user information is limited to people authorized to access it for legitimate purposes such as operating, maintaining, securing, or supporting Corpus.

No internet-based service can guarantee absolute security.

You are responsible for keeping your account credentials and private Corpus connection information secure.

If you believe your Corpus account or connection credential has been compromised, contact support@withcorpus.com.

Corpus is intended only for people who are at least 18 years old.

You may not create or use a Corpus account if you are under 18.

We do not knowingly collect personal information from anyone under 18.

Corpus is currently intended for users in the United States.

The service is not currently offered or intended for use outside the United States.

We may disclose information if reasonably necessary to comply with applicable law, legal process, or a valid governmental request, or to protect the rights, security, and integrity of Corpus, our users, or others.

If Corpus is involved in a merger, acquisition, financing, reorganization, sale, or transfer of the service, information may be transferred as part of that transaction. Such a transfer is not a sale of personal information for advertising or data-broker purposes.

We may update this Privacy Policy as Corpus develops.

When we make changes, we will update the effective date above.

If a change materially affects how we collect, use, or disclose personal information, we will take reasonable steps to provide additional notice.

Questions about this Privacy Policy or Corpus's handling of personal information can be sent to legal@withcorpus.com.

Account, support, and deletion requests can be sent to support@withcorpus.com.