Privacy Policy

1. Information We Collect

We believe in minimal data footprinting. We only collect information strictly required to authenticate your access and compile runtime applications:

• Account Credentials: Email address, optional profile name, or Google OAuth identity tokens.
• Prompts & Directives: The text or voice inputs you provide to compile ephemeral applications.
• Transient Session Logs: Diagnostic telemetry generated during the 24-hour lifecycle of an active sandbox.
• Billing Identifiers: Transaction status and token balance managed securely via external PCI-compliant payment gateways. We never store raw credit card numbers.

2. The 24-Hour Dissolution Protocol

Every runtime application created via Ephemay exists inside an isolated ephemeral sandbox. Unless explicitly exported or conserved by users on qualifying paid plans:

• Sandbox runtimes and dynamic in-memory states are permanently wiped 24 hours after initialization.
• Audio recordings utilized for speech-to-text processing are discarded immediately after transcription completion.
• Temporary session cache files are unrecoverable post-destruction.

3. AI Processing & Third-Party LLMs

Ephemay orchestrates runtime generation by interfacing with state-of-the-art foundational large language models. Your inputs are routed through enterprise inference endpoints governed by zero-retention policies; your private data and custom prompts are not used to train public foundational AI models.

4. Your Data Rights

Regardless of your jurisdiction (including GDPR, CCPA, and UK GDPR), you hold full ownership of your conserved archives. You retain the absolute right to export your dataset snapshots, inspect recorded history, or trigger an immediate complete account wipe.