Privacy Policy

This policy describes how this ReCreateHistory instance handles your data.

What is collected

Account data: email address, display name (optional), and a salted bcrypt hash of your password — never the password itself.
Your documents: files you upload and the structured data derived from them (text blocks, entities, events, claims, timelines). These are stored in a per-account ledger isolated from every other account.
Operational records: ingestion logs, answer audit records (your questions and the evidence used to answer them), and resource-usage counters (storage, daily questions) used to enforce quotas.

How it is used

Solely to provide the Service to you: parsing, indexing, reconstruction, and answering your questions. Your data is never sold, shared with other users, or used to train models.

AI processing

Question answering may send excerpts of your documents to a configured AI model — either a local model on the Operator's server (Ollama) or a third-party API (such as Anthropic or OpenAI) acting as a processor. Facts in history reconstructions come from your documents, not from the model. If this deployment uses a third-party AI API, that provider's data-usage terms apply to those excerpts.

Storage and security

Data is stored in per-account databases on the Operator's server. Sessions use httpOnly cookies; passwords are bcrypt-hashed; original files are kept with SHA-256 integrity hashes. Transport encryption (HTTPS) is provided by the hosting platform.

Retention and deletion

Your data is retained while your account is active. You can delete individual files in-app; to delete your account and all associated data, contact the Operator. Deletion removes your ledger, uploads, and account record.

Contact

For privacy requests, contact the Operator of this deployment.

Last updated: 2026-07-08