Privacy Policy

Last updated: 5 February 2025

1. Introduction

Pensieve ("we", "our", "us") operates the website at pensieve.uk and the Pensieve application. This policy explains how we collect, use, and protect your personal data when you use our services.

2. Data We Collect

We collect the following categories of data:

  • Account information — name, email address, and authentication credentials when you create an account.
  • Organisation data — organisation name, membership details, and role information.
  • Connected service data— when you connect third-party services (such as Notion, Google Drive, or Slack), we access and process content from those services on your behalf. This may include documents, messages, pages, and associated metadata.
  • Uploaded content — files and documents you upload directly to the platform.
  • Usage data — workspace activity, chat interactions with the AI agent, and general platform usage patterns.

3. How We Use Your Data

  • To provide, maintain, and improve the Pensieve service.
  • To process your content through AI models to generate insights, build knowledge graphs, and power the AI agent.
  • To synchronise data from connected third-party services.
  • To communicate with you about your account and service updates.

4. Third-Party Services

When you connect external services through OAuth (such as Notion, Google Drive, or Slack), we store encrypted access tokens to interact with those services on your behalf. We only request the minimum permissions necessary to read content. You can disconnect any service at any time through your organisation settings.

5. Data Storage and Security

Your data is stored securely using industry-standard measures. All OAuth tokens are encrypted at rest using AES-256 encryption. Content is stored in isolated environments scoped to your organisation. We use Supabase for authentication, database, and file storage, with row-level security policies enforcing data isolation between organisations.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account or disconnect a service, associated data will be removed within 30 days. You may request immediate deletion by contacting us.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Export your data in a portable format.
  • Withdraw consent for data processing.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking or advertising cookies.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised date.

10. Contact

If you have questions about this privacy policy or your data, contact us at euan@pensieve.uk.