Privacy Policy

Overview

Obsidian is a private document analysis platform. Privacy is not a feature — it is the architecture. This policy explains what data we collect, how we use it, and how your documents remain private.

Document Privacy

Your document content is never seen, accessed, or stored by our servers. When you upload documents to a vault, they are transmitted directly to your dedicated GPU instance via end-to-end encryption. All AI processing — parsing, embedding, analysis, and generation — occurs exclusively on your isolated GPU. Our orchestration layer handles only metadata (vault status, billing, provisioning) and never has access to your document content.

Information We Collect

We collect the following information:

• Account information. Your email address and password (hashed) when you create an account.
• Billing information. We accept Visa and Mastercard. Your card details are handled by our PCI DSS-compliant payment processor. We do not store your full card number.
• Vault metadata. Vault names, creation timestamps, status, model tier selection, and usage duration. We do not store document content, chat transcripts, or AI-generated outputs.
• Usage data. GPU time consumed, billing transactions, and account activity for billing and support purposes.

How We Use Your Information

• To provide and maintain the Obsidian platform.
• To process payments and manage your billing.
• To communicate with you about your account and service updates.
• To comply with legal obligations.

Data Storage

Account information and vault metadata are stored in encrypted databases. Your documents and AI-generated outputs exist only on your dedicated GPU instance and are permanently deleted when you destroy the vault.

Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We may share information only in the following limited circumstances:

• With payment processors to handle your Visa or Mastercard transactions.
• When required by law, regulation, or legal process.
• To protect the rights, safety, or property of Obsidian or its users.

Cookies

We use only essential cookies required for authentication and session management. We do not use analytics, tracking, or third-party cookies. For more details, see our Cookie Policy.

Data Deletion

You can destroy individual vaults at any time, which permanently deletes all associated data. To request deletion of your account and all associated information, contact us at support@obsidian.expert.

Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. To exercise these rights, contact us at support@obsidian.expert.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the platform.