Privacy Policy

This policy explains what Millenion AB ("we", "us") collects when you use Aedelgard. It is short because the architecture is built to collect very little. We are the data controller under the GDPR.

1. The principle

Your optional cloud backup is envelope-encrypted (AES-256-GCM) on your device using a key derived from your Aedelgard key. Local records and portable ZIP exports are not covered by this encryption claim. Registration-key issuance and authentication involve our service; snapshot encryption alone does not establish protection from a privileged live operator. We do not sell your memory or use it to train models.

Your Aedelgard key controls cloud access. Keep a private backup: we cannot reset a lost key. Losing it does not erase records already on your device. Model-provider credentials are separate.

2. Inference — outside our path

Aedelgard does not serve model inference. The desktop body connects to the model provider you choose, on your own provider key, directly from your machine. Prompts, memory context and responses travel between you and that provider; they do not pass through Aedelgard. Your provider's terms and privacy policy govern their handling of that traffic.

3. What we process, and why

Your encrypted vault — the ciphertext of your memory, stored and synced so your mind can follow you between machines. Legal basis: performance of our contract with you. Cloud authentication also processes credentials and session tokens.

Billing data — processed by Stripe. We receive a payment confirmation, a subscription status and a Stripe customer reference; card details never reach us. Legal basis: contract, and Swedish accounting law for retention.

Operational data — technical logs needed to run and secure the Service: request timing, status codes, error traces, and the IP address of a request for abuse protection. Do not include credentials or private project content in support reports. Legal basis: our legitimate interest in keeping the Service secure and reliable.

4. Website and support

The website uses Plausible for aggregate pageviews and named interaction events on instrumented pages. This is third-party, cookieless analytics—not a claim of no data processing. Browser storage remembers notice dismissal. If you contact support, we process the message and contact details you provide to answer your request (contract or legitimate interests, depending on the request).

5. Where it lives, and who touches it

All hosting and sync run on Amazon Web Services in the EU (Stockholm, eu-north-1). Stripe processes payments. Plausible supplies website analytics; support and external web resources have their own providers. Hosting in Stockholm does not establish that all processor handling stays in the EU. Your model provider is a separate relationship. Processor transfer safeguards remain under review; contact us before relying on an EU-only requirement.

6. Retention

Your encrypted vault is carried while your subscription is active. Cancelling pauses hosting only — your key, your memory and its full export remain yours, and the mind lives on your own disk regardless (see the Terms). Following cancellation, your server-side encrypted vault remains available for retrieval through the end of your prepaid period plus a 30-day export grace window, after which deletion is due under our terms. The service-log retention target is 30 days. Verification of deletion across storage and backups remains open; these are not claims of independently verified erasure. Billing records are kept for the period Swedish accounting law requires.

7. Your rights

Under the GDPR you may request access to, correction or erasure of the personal data we hold, request restriction, object to processing based on legitimate interest, and receive your data in a portable form. Your memory is already portable by design — export it from the body at any time as plain files. The personal data we can act on directly is limited to billing and operational records; your vault is reached only through your Aedelgard key. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority.

8. Contact

Data requests and questions: contact@aedelgard.com · Millenion AB, Sweden.

This policy describes how Aedelgard works today. Material changes will be reflected here and dated above.