Privacy policy

What Cornelius AI stores, what it does with it, who else sees it, and the controls you have. Plain words, and the same rules are built into the code (see how it works and keeping you safe).

Back

Who this covers

This policy covers the Cornelius AI service you sign in to at this address, run by the operator of this server ("we"). It applies to your account and everything you keep in it. Last updated 13 October 2026.

What we store

Your account: Your name, email address, a hashed password, your two-step sign-in settings, and the devices and times you signed in.
Your notes, documents and files: What you write, upload or import, in your own workspaces, separated from everyone else's. Uploaded files are stored encrypted at rest.
Your conversations: Your questions and the assistant's answers, so you can look back at them. You can turn saving off in Settings, Privacy, and delete them at any time.
Connected apps: When you connect Gmail, Google Calendar, Google Drive, Microsoft 365, GitHub, Notion, Meta and others, we store the sign-in token the provider gives us, encrypted. We do not store your password for those services.
Settings and your own API keys: Your preferences, routines, skills and brands. If you add your own AI provider keys, they are stored encrypted and used only for your requests.
Activity and security records: A record of each action the assistant took for you (what, when, how it ended) and of sign-ins and security changes, kept so you can see what happened. Secrets are blanked out of these records before they are written.
Usage: How many AI requests you made, which models answered and an estimate of their cost, to show on your Usage page and to apply your plan's limits.

How we use it

Only to do what you ask: answer your questions from your notes, run the routines you set up, use the apps you connected in the way you approved, and keep your account working and secure. We do not sell your information, do not use it for advertising, and do not use it to train AI models.

Who else sees it

The AI providers you choose. When you use an online model, your question and the notes, emails or files it needs are sent to that provider (Anthropic, OpenAI, Google, OpenRouter or Moonshot, depending on the brain you pick; ElevenLabs when a voice reads an answer aloud) under their terms, and only to produce your answer. Folders and notes you mark private are never sent to an online provider. A workspace can be limited to the providers you allow.
The apps you connect receive only what the action you approved needs (an email you asked to send, an event you asked to book).
Our hosting. The service runs on Amazon Web Services in Sydney, Australia; your data is stored there, encrypted at rest and in transit.
People in a workspace you share. Notes in a shared workspace are visible to its members, with the roles the owner set.

Nobody else. We do not share your information with anyone for their own purposes, and we only disclose it if the law requires.

Google user data

If you connect a Google account, Cornelius AI asks only for the permissions each feature needs: reading and drafting Gmail to answer questions about your mail and prepare replies you approve; reading and creating Calendar events you ask for; and reaching only the Drive files you pick in Google's file picker.

Cornelius AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the features you asked for, is never used for advertising, is never sold, is not used to train AI models, and is not read by people except with your permission, for security, or where the law requires. You can disconnect Google at any time in Tools, and in your Google account's permissions.

The same applies to Microsoft 365 and every other app you connect: only the permissions the feature needs, used only for what you ask, disconnectable at any time.

How long we keep it

Your notes, files, conversations and settings: for as long as your account exists, or until you delete them.
Sign-in sessions: they end after 24 hours unused and 30 days at most; you can end them all from Settings.
Security records: 12 months.
Database backups: 7 days, then they expire.
Deleting your account removes your notes, files, conversations, keys, app connections and workspaces only you own. Nothing is kept except what the law requires.

Your controls

Download everything as one zip file, and delete your account, from the Privacy page when signed in.
Disconnect any app, or all of them at once, in Tools.
Private folders and notes that online AI never sees; client-confidential workspaces limited to the providers you allow; a local model that keeps everything on your own computer.
Turn off saving conversations, and two-step sign-in, in Settings.

Security

Encryption in transit (HTTPS) and at rest; keys, tokens and secrets encrypted with a separate master key; passwords hashed; two-step sign-in; sign-in throttling; an append-only security log; and a permission gate in the code that makes every outside action wait for your approval. No system is perfect: if you think something is wrong, change your password and contact us.

Changes and contact

If this policy changes in a way that matters, we'll say so on this page and in the app. Questions, or a request about your data: contact the person who runs this server.

This page is written to be understood, not to be legalese; where a law gives you more rights than it describes, the law wins.