Where your data is stored, who can see it, and what happens to what you write to the assistant.
Where the app runs
- The app and its database run on a Hetzner server in Falkenstein, Germany (EU).
- The connection is encrypted (HTTPS).
What is stored
- Your account: name, email and an encrypted form of your password.
- Your conversations, product profile, PO profile and OKRs.
- Usage per reply: number of tokens and which model replied. Not the content.
- You can delete a conversation yourself. To have your whole account deleted, contact the administrator.
The language model
- When you write, your message is sent via OpenRouter to a language model. The request goes through OpenRouter's EU address and is processed only in the EU.
- The model is Anthropic's Claude, running on Google Cloud in Europe or Amazon Web Services in Ireland. As a fallback, an OpenAI model on Microsoft Azure in the EU may reply.
- We only use providers with zero data retention: they do not store your messages or train on them.
- OpenRouter does not store the content. It records usage: time, model and number of tokens.
Who can see what
- The admin pages cannot open your conversations. Whoever operates the server (WisdomWorks) has technical access to the database.
- No one rates you as a person based on your conversations.
- If you flag a reply as wrong, a copy of the text you approved is sent to the administrator. The copy remains even if you delete the conversation.
Backups and logs
- The database is copied every night on the server (the 14 most recent copies are kept), and Hetzner takes its own backup of the server.
- A daily copy is also kept on WisdomWorks' backup server in Denmark for 30 days.
- For security, the server keeps an access log (IP address, time and page). It is cleared on a rolling basis.
Last updated 5 October 2026