Privacy Policy.

Default retention is minimal. Uploaded documents use TTL deletion unless workspace save is explicitly enabled.

PII scrubbing runs before model calls. Raw sensitive prompts are not persisted by default.

Tenant isolation and role-based access control are required for production deployment.