Privacy Policy

Your words stay yours

Stored only against your account and readable only through your login: the questions and turns of your sessions, the map the system builds from them, and anything you upload. We never sell your sessions and never use them to train models. Nothing you make is public unless you create a share link, and those links stay out of search engines. Delete your account in Settings and all of it — sessions, map, uploads, and every share link — is erased for good.

1. Information We Collect

When you use SocratesOS (“the Arena”), we collect information you provide directly: your email address, display name, and the content of your dialectic sessions. If you sign in with Google, we receive your name, email, and profile picture from Google. If you subscribe to the weekly email, we store your email address, your confirmation, and the page you subscribed from. We also collect basic, anonymous usage analytics (pages visited, aggregate events) to understand how the site is used.

2. How We Use Your Information

We use your data to:

• Provide and improve the dialectic engine and cognitive memory features
• Authenticate your identity and manage your account
• Process subscription payments via Stripe
• Send transactional emails (account verification, receipts)
• Analyze aggregate usage patterns to improve the platform

We do not sell your personal information. We do not use your session content to train language models.

3. Data Storage & Security

Your data is stored on secured infrastructure with encryption at rest and in transit. Session data, cognitive graph nodes, and uploaded documents are associated with your Actor ID and protected by authentication.

4. Private Questions

Your private questions are yours. You can delete your account and associated data, and we are building finer-grained controls for what becomes memory. Socrates may learn from consented, de-identified patterns, but it does not need to expose your private content to improve the system.

5. Third-Party Services

We use the following third-party services:

• AI model providers (via OpenRouter) — the turns of your session are processed by the language model that generates the dialogue, only to produce its responses, never to train models
• Voice, if you choose to speak (OpenAI, through OpenRouter)— the recording is sent to be turned into text and is then discarded. We never store it. Their published data controls list transcription as not used for training, with no retention for abuse monitoring and none for application state, and each request refuses to be routed to any provider that would keep it. The text lands in your composer for you to read and edit before anything is sent. Typing keeps your words on our own machines and involves nobody else. This arrangement is temporary and ends when we run the transcriber ourselves
• Stripe — payment processing
• Google OAuth — authentication
• Resend — transactional and weekly email
• Google Analytics — visit and campaign measurement, under Consent Mode (cookieless in the EEA, UK, and Switzerland)
• Google Ads — measures whether our own search ads led to a completed Ping, with ad personalization signals switched off, so it builds no remarketing or audience list from your visit
• PostHog — cookieless product analytics
• hCaptcha — bot prevention

Each service processes data under their own privacy policies.

6. Your Rights

You can:

• Access your data through the Portal settings
• Export your cognitive artifacts and session history
• Delete your account and all associated data permanently
• Update your profile and language preferences at any time
• Unsubscribe from the weekly email at any time via the link in every send

7. Cookies

We use essential cookies for authentication and session management. Our product analytics (PostHog) runs cookieless and stores nothing on your device. Google Analytics runs under Google Consent Mode: for visitors in the EEA, the UK, and Switzerland it sets no cookies at all and relies on anonymous, modeled measurement; elsewhere it uses its standard cookies to measure visits and the performance of our own campaigns. We do not run remarketing or cross-site advertising trackers.

8. What advertising never sees

Nothing you write reaches an advertising or analytics platform. Not a question, not a turn, not a closing line, not a document you uploaded, not a fragment of any of them.

We can be exact rather than reassuring, because the list is short and closed. The only events we send are: that someone asked to subscribe and that they confirmed it; that a Ping completed; that a Sprint completed; that voice was used or declined; and that a payment or donation succeeded. The only descriptive value any of them carries is the address of the published Note the visitor came from, so we can tell which question brought someone here. Payments carry the Stripe transaction reference, the amount and the currency, and nothing else.

We do not run remarketing, we build no audience or customer-match lists, and ad personalization signals are switched off at the tag itself. A test in our codebase fails the build if any event ever carries a value outside that list.

9. Contact

For privacy-related inquiries, contact us at [email protected] or at our mailing address: 700 K Street Northwest, Washington, DC 20001.