The short version — and every word of it is binding on us
- No human at Persephone reads your entries. Not support, not engineers, not the founder. Ever.
- Your entries are encrypted in transit and at rest.
- Sponsors see nothing. If an organization paid for your seat, they receive anonymized, aggregate usage counts only — never your content, never your identity.
- Every disclosure is your decision. Your file leaves Persephone only when you export or share it.
- We do not sell your data. We do not show ads. We never will.
- AI features are off until you say yes — and they serve only you.
1. Who we are
Persephone.ai (Persephone.ai Incorporated, a Delaware corporation) operates an encrypted documentation platform available on iOS, Android, and the web. Questions about this policy: info@persephone.ai.
2. What we collect, and why
- Account information — an email address and login credentials, to operate your account.
- Your entries and attachments — the content you create, encrypted and stored so it exists when you need it. This content belongs to you.
- Safe-people designations — the contacts you choose. They are notified of nothing and see nothing unless you share, or unless a release feature you configured and control activates on your instructions.
- Payment information — processed by Stripe. We never see or store your card number.
- Website form submissions — if you submit a form on our site (seat request, sponsorship, story, vote, country request, investor request), we store what you typed and when. Each form states its purpose; we use submissions only for that purpose.
- Basic service data — technical logs necessary to run and secure the service. We collect the minimum we can.
3. What we never do
- We never sell or rent your data — to anyone, for anything.
- We never show advertising or share data with advertisers.
- We never give sponsors, employers, safe people, or anyone else access to your content or identity.
- We never use your entries to train AI systems outside the platform, and never for any purpose other than serving you.
- We never contact you in a way that reveals what Persephone is without your consent to that channel.
4. AI, by your consent only
The app asks whether you authorize AI to be aware of your entries. If you decline, it isn't. If you consent, AI analysis exists to serve you alone — insight, patterns, and guidance delivered privately inside the platform — and your consent is revocable at any time in settings. AI outputs about your file are never shared with sponsors, partners, or any third party, and are never inputs to any commercial or aggregate analysis.
5. Sponsored seats and organizations
When an organization sponsors seats, it receives one thing: anonymized, aggregate utilization counts (for example, how many of its seats are active). It cannot see who holds a seat, what anyone wrote, or whether any specific person uses the platform. This is a contractual commitment in every sponsor agreement and an architectural property of the platform. If your seat was gifted by an individual sponsor, they receive nothing at all — they will never know who used their gift.
6. When your data leaves Persephone
- At your direction. Exports — PDF, certified hardcopy, SOS file — go where you send them, when you send them.
- Service providers. We use a small number of infrastructure providers (hosting, payment processing, form handling) bound to process data only on our instructions. Current processors: Google Firebase and Google Cloud (authentication, encrypted database, and file storage), Netlify (website hosting and secure form handling), and Stripe (payment processing).
- Legal process. If we receive a legally binding demand, we can only produce what we hold, we scrutinize every request, we resist overbroad ones, and we will notify you before producing your data unless the law prohibits it.
7. Retention and deletion
Your file exists for as long as you want it to — that is the product. By design, individual entries cannot be silently edited or erased inside the app: your record is tamper-evident, and corrections are added as new, linked entries so the original trail stays intact. That protection exists for you, not against you — you can delete your entire account and everything in it at any time, and when you do, your data is removed from our production systems and purged from backups within 30 days. Website form submissions are retained for 12 months and then deleted. You can request account deletion at any time via info@persephone.ai.
8. Security
Entries and attachments are encrypted in transit and at rest. Access to production systems is restricted, logged, and never includes the ability for staff to browse user content. The app can live on your device under a discreet icon and behind a PIN only you know.
9. Your rights
Wherever you are, you can access, export, correct, or delete your data. If you are in the United Kingdom, Ireland, or another jurisdiction with statutory privacy rights (such as GDPR or UK GDPR), you additionally have rights to portability, restriction, objection, and complaint to your supervisory authority. To exercise any right: info@persephone.ai.
10. Age
Persephone is intended for users 18 and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.
11. Changes
If this policy changes, we will post the new version here with a new effective date and, for material changes, notify you in the app. We will never change the commitments in the box at the top of this page in a way that weakens them.