Legal
Privacy Policy
Last updated: 5 July 2026
GraphAqal is built local-first on purpose. Your intellectual history is not our product, and this policy is written to be read, not to hide behind. If anything here is unclear, email support and we'll answer plainly.
The one-sentence version
Your conversation content is captured, processed, and stored entirely on your own device; the only things that reach our servers are what's needed to sign you in and confirm your subscription.
What stays on your device (and never leaves)
- The text of your Claude and ChatGPT conversations, projects, and artifacts.
- The local database file that holds them.
- The mathematical embeddings and topic clusters computed from them — all generated by a model that runs on your machine, offline.
None of the above is transmitted to us, and we have no ability to read it.
How the browser companion works
The GraphAqal browser extension reads only the conversations of the account you are already signed into, using your own existing browser session. It does not log into anything on your behalf, does not read other sites, and sends the data it captures only to the GraphAqal desktop app running locally on the same computer (over 127.0.0.1, authenticated with a one-time pairing token). It requests access to only claude.ai and chatgpt.com.
What our servers do hold
- Account: your email address and authentication identifiers, via our auth provider, so you can sign in across devices.
- Billing status: whether your subscription is active and its tier, via our payment reseller. We do not store your card details — the reseller does.
Service providers
We rely on a small number of processors strictly for the functions above: an authentication and database provider for accounts, and a Merchant-of-Record payment provider that handles checkout, billing, and tax on our behalf. These providers process only the account and billing data described here — never your conversation content.
Cookies & analytics
This website uses only what's necessary to function and, if enabled, privacy-respecting, aggregate analytics. The desktop app does not track your usage of your own graph.
Your rights
Because your content lives on your device, you are in direct control of it — delete the local database and it's gone. For the limited account and billing data we hold, you may request access or deletion at any time by emailing support. Deleting your account removes your profile and billing linkage from our systems.
Children
GraphAqal is not directed to anyone under 16, and we do not knowingly collect their data.
Changes
If this policy changes materially, we'll update the date above and, for account holders, note it in-app or by email.