Privacy Policy
Effective August 27, 2026
OriginKeep is a personal context vault. You put your own material in it (a profile, memories, skills, and project context), and it serves that material to the AI assistants you choose to connect. This policy says what we store, why, and what control you have. The short version: your content is yours, we store it to serve it back to you and the assistants you connect, we do not sell it, and we do not use it to train AI models.
What we store
- Your vault content. The documents you create or approve: profile, memories, skills, projects, and any pages or files you store.
- Account details. Your email address, a sign-in identifier from your identity provider, and, if you sign in with Google, the profile photo Google provides.
- Connections. The named connector links you create for each assistant, so you can revoke each one on its own.
- Governance records. The change history of every document, the approval decisions you make, and a log of which connected assistant read what and when. These records are the product working as promised, and they are visible to you in the app.
How we use it
To operate the service: storing your vault, serving it to you in the web app, and serving it to the assistants you have connected, within the scopes you set per document. We do not sell your data, we do not show advertising, and we do not use your content to train AI models.
AI processing
Some features, such as asking questions of your own vault or drafting a skill, send the relevant vault content to an AI model provider to produce the answer. We use Anthropic's Claude models, reached through Anthropic's API or through Google Cloud's Vertex AI. These requests run under the providers' commercial API terms, which do not permit them to train on the content.
Where your data lives
Your vault is stored in a managed PostgreSQL database on Google Cloud in the United States (us-east4), with automated backups and point-in-time recovery. Transactional email, when you use email features, is delivered through Postmark. These providers process data on our behalf as sub-processors: Google Cloud (hosting and database), Postmark (email delivery), and Anthropic (AI processing as described above).
Who can see your content
You, the assistants you connect (within the per-document scopes you set), and anyone you explicitly invite or share a page with. Nobody else, unless the law compels us. Every assistant read is logged, and you can review the log at any time.
Your controls
- Scope any document to specific assistants, or to none.
- Revoke any connection at any time; its link stops working immediately.
- Review the full read log and change history.
- Export your entire vault as a zip at any time.
- Delete any document. To delete your whole account, write to contact@originkeep.com and we will complete it promptly; self-serve account deletion is planned.
Cookies
We set one essential session cookie so you stay signed in. There are no advertising or third-party tracking cookies.
Children
The service is not directed to children under 13, and we do not knowingly collect their data.
Changes
If this policy changes in a way that matters, we will say so in the app before the change takes effect. The effective date above always reflects the current version.
Contact
Questions about privacy: contact@originkeep.com.