Privacy Policy

• Your account is just an email and authentication, handled by Supabase Auth. We never see your password.
• Sage stores your conversations, the memory it forms about you, and your settings — isolated to your account.
• We do not sell your data, and we do not use it to train our own or anyone else's AI models.
• You can export your memory and delete any of it — or your whole account — whenever you want.
• We share data with a small set of named service providers only to make Sage work — and nothing more.

To use Sage you create an account with an email address. Authentication is handled by Supabase Auth, either through Google sign-in (OAuth) or an email-and-password login. If you use a password, Supabase hashes it — it is never stored in a form we (or anyone) can read, and we never see your raw password. If you sign in with Google, we receive your basic profile (name, email) to create and identify your account; we do not get access to your Gmail, Drive, or other Google data.

Sage is a chief of staff that remembers you, so by design it keeps a record of what you tell it. Specifically:

• Your conversations — what you say to Sage across the web app, voice, and any channel you connect.
• The memory Sage forms about you — the facts, people, projects, and context it derives from those conversations so it can recall them later.
• Your settings and preferences— how you've configured Sage, your subscription tier, and similar account details.

This lives in two places: a Supabase (Postgres)database, where every row is isolated to your account by row-level security so one account can never read another's data; and Mnemosyne, an external memory service operated for Sage that stores and retrieves your memory so Sage can recall the right thing at the right moment.

To provide Sage, we send some of your data to a small set of third-party providers — only to deliver the service, never to advertise to you or build a profile elsewhere. Each one receives only what it needs:

• Anthropic (Claude) and OpenAI— to generate Sage's responses and to create embeddings (the numeric representations that power memory and search).
• ElevenLabs — for voice synthesis. When Sage speaks, the text of the reply is sent to produce audio; it is not retained by us beyond fulfilling that request.
• Supabase — our database, authentication, and file storage.
• Stripe — to process payments. Stripe handles your card details directly; we never store your card number.
• Vercel — hosting and delivery of the application.
• Telegram — only if you choose to connect it, so you can talk to Sage there.

• We do not sell your data. Ever.
• We do not use your conversations or memory to train our own AI models, and we do not let our providers use your data to train theirs.
• We do not run third-party advertising or ad-tracking on you.

Your memories are private by default. Nothing is shared unless you share it. Ever. If you're on a team plan, you can choose to share individual memories — or everything from a conversation — with your workspace. Sharing is always an explicit act by you; Sage never shares anything on its own and never suggests that you should.

When you share a memory, your teammates in that workspace can see:

• the content of the memory you shared;
• your name, as the person who shared it;
• the date you shared it.

Sage uses shared memories to answer your teammates' questions from that pooled knowledge, attributing the answer to you the way a colleague would (“per your note from the pricing discussion”). Teammates only ever see what you've chosen to share — never your private memories.

You can make anything private again at any time, from the memory browser or from the conversation. The moment you do, it drops out of your workspace and Sage stops using it for anyone else — immediately. If you leave a workspace, the memories you shared stay with the team as shared knowledge and remain attributed to you; your private memories leave with your account.

Because the memory is the whole point of Sage, you get full control over it:

• Export — you can export your memory from inside the app at any time.
• Delete selectively — you can delete individual memories whenever you want.
• Delete everything— you can delete your entire account. Doing so removes your data from Sage's database and sends a deletion request to the external memory service (Mnemosyne).

To be honest about the limits: deletion is immediate in our live systems, but encrypted backups and operational logs may still contain some data for a short period before they age out and are overwritten. We don't restore deleted data from backups except to recover from a system failure.

We use essential cookies only — the session cookies that keep you signed in. We do not use third-party advertising or cross-site tracking cookies. Because these cookies are required for the app to function, there is no advertising profile to opt out of.

Your data is encrypted in transit, isolated per account by row-level security, and accessible only to the authenticated owner of the account and the named providers above. No system is perfectly secure, but we limit who and what can touch your data to the minimum needed to run Sage.

If we change how we handle your data, we'll update this page and revise the “Last updated” date above. For material changes, we'll make a reasonable effort to notify you in the app or by email before they take effect.

Questions, requests, or concerns about your privacy? Email us at support@perpetualcore.com.