Legal · Updated
Transparency
| Who | What they see | Why | How long it is kept | What deleting does |
|---|---|---|---|---|
| Cloudflare | Every request, with your IP address and browser. While a reply is being written: the conversation, your profile and memories, and any files or images you attach. On your own key, the same conversation once per turn while Seufic prepares it. | It hosts the site and server, runs the four built-in models, and keeps the secret that locks your chat key. It also runs Turnstile, the invisible bot check at sign-in, which reads things like your IP address. We only get a pass or fail. | Our server keeps nothing once a reply is saved. Cloudflare keeps its own request logs under its own policy, and its page counter sets no cookies. See the Turnstile Privacy Addendum. | Nothing to delete, since no chats are stored there. Its logs follow its own policy. |
| SupabaseFor now. We plan to move to a more secure database that we run ourselves. | Your email and password hash, profile, memories, notes, settings, credit usage, signed-in browsers, artifacts, attached files, the files you keep in a project, and your chat key (locked with a secret it never has). A keyed hash of your PIN check value if you set one, never the PIN. Messages, chat titles and project names only as unreadable ciphertext. It sees your password when you sign in and keeps only the hash. | It’s the database, so your stuff is on every device. We plan to move to a more secure database that we run ourselves, and this page will say when we do. | As long as your account exists. | A deleted chat goes at once, its files within 30 days. Closing your account works as described below. |
| Resend | Your email address, only if you join the mailing list. Open and click tracking are off. | It sends the newsletter. | Until you leave the list. | Leaving the list on the Contact page deletes it at once. The list isn’t tied to your account, so closing your account doesn’t remove you. |
| The web search provider | A short search query based on your latest message, sent from our server. Never your account or the rest of the chat. Websites an answer reads also only see our server. | To answer questions about current facts. We try Tavily, then Brave Search, DuckDuckGo and Wikipedia. | Under its own policy. | Deleting a chat doesn’t reach it. |
| Public data sources | Only the name, code, amount or address a question needs, such as a company name, a ticker, a country code, a currency pair, a medicine or a website address, sent from our server. For a page that has gone, the Internet Archive sees its address. | To check companies, figures, research, medicines, government spending and websites against the records themselves. We use OpenAlex, the US SEC, GLEIF, UK Companies House, Wikidata, the World Bank, Frankfurter, the US FDA, ClinicalTrials.gov, USAspending.gov, domain registries and the Internet Archive. | Under each source’s own policy. | Deleting a chat doesn’t reach them. |
| Have I Been Pwned | The first five characters of the SHA-1 hash of a password you choose, sent from your browser. Never the password or the rest of the hash. | To refuse a password that has already leaked from another site. | Under its own policy. | Nothing to delete: what it sees matches hundreds of passwords. |
| The provider of your own API key | Only if you use one of its models: the conversation, your profile and memories, attached files and your IP address, sent from your browser. In a Team, the other AIs’ answers too. | You asked it to answer. We support Google, OpenAI, Anthropic, xAI, Mistral AI and OpenRouter. | Under that company’s terms, which may let it log or train on what it gets. We aren’t responsible for that. Our copy of the chat is encrypted like any other. | Deletes our copy only. Ask the provider for theirs. |
| The operator, the one person who runs Seufic | Everything Supabase stores in readable form. Chats are ciphertext and their key is locked with a secret on Cloudflare, so the operator could open them but doesn’t. The operator also writes the server code that reads messages to answer them. | To run Seufic, fix things, and answer legal requests (section 10 of the privacy policy). | The same as Supabase. | The same as Supabase. |
The models Seufic runs
All four run on Cloudflare Workers AI. The companies that made them never see your chats.
- Atlas is Qwen3.8 27B, from Alibaba. The default, and it checks every image you attach before it’s kept.
- Cobalt is Gemma 4 26B, from Google. For hard questions.
- Altair is Llama 4 Scout, from Meta. For light questions.
- Spectre is Mistral Small 3.1 24B, from Mistral AI. For code.
All four read images. A smaller model, GLM-4.7-flash from Z.ai, reads the last few turns to decide if a web search is needed and which public sources to ask. BAAI bge-reranker ranks the pages found and Meta M2M-100 translates sources in other languages.
Closing your account
In Settings, under Danger zone:
- Deactivate. You’re signed out. Sign back in within 31 days to get everything back. After that it’s erased for good.
- Delete. Everything is erased right away.
Either way, a short record (email, handle, name, profile details and a count of what you had) is kept for 3 months, then removed. Only the operator can read it.
Training
Your chats are encrypted and never used for training. Neither are your profile, memories, notes, artifacts or files.
What you can check yourself
- Stored messages are ciphertext. Open your browser’s developer tools and send a message. What goes to the database starts with
sx1.and is unreadable. - The encryption runs in your browser. It’s /js/lib/chat-crypto.js, and it runs before anything leaves your device.
- The PIN never leaves your browser. /js/lib/chat-pin.js turns it into a check value before anything is sent.
- No third-party scripts. Our Content-Security-Policy only allows scripts from seufic.com and Cloudflare’s page counter and Turnstile.
The privacy policy has the full details.