Privacy Policy

What we keep, who can see it, and how to make it go away.

Last updated October 22, 2026

What we store

  • Your account: email address, the name you choose, and a hashed password (or the sign-in method you use).
  • Your workspaces: every document and its version history, folder names, and who changed what. This is the product.
  • Connections: which AI tools you have connected, when they were last used, and a hashed key for each. We never store the key itself.
  • Invitations: the email addresses workspace admins invite, until the invitation is accepted or revoked.
  • Usage: which features are used and when, and errors the app runs into, so we can fix problems. Usage events are tied to a workspace, not to the content of documents.

Who can see your documents

The people in your workspace, and the AI tools they have connected. Nobody else, including us, reads your documents in the ordinary course of running the service; we may look at specific data when you ask for help or when needed to investigate abuse or keep the service running. We do not use your documents to train models and we do not sell data.

Where it lives

Carbon runs on hosting providers in the United States. The services that process data on our behalf are:

  • Supabase (database, authentication, email delivery for sign-in messages)
  • Vercel (application hosting)
  • Resend (email delivery for invitations and sign-in messages)
  • Mixpanel (usage analytics)
  • Sentry (error reporting)

Each of these only receives what it needs for its job.

Cookies

A sign-in cookie keeps you signed in. Analytics uses a cookie or local storage to tell visits apart. There are no advertising cookies.

Email

We send email to confirm your address, reset your password, and deliver invitations. We do not send marketing email.

Deleting your data

Delete a document, a workspace, or your whole account from Settings. Workspace and account deletion are immediate; deleted documents can be restored from the workspace's Deleted documents until the workspace itself is deleted. Backups roll off within 30 days. When you delete your account, documents you wrote stay in the workspaces you were part of, attributed to your name, because your teammates rely on them.

Export

You can download every document in a workspace as a zip from Settings, or fetch it through the API, at any time.

Changes and contact

We will note changes to this policy here. Questions or requests about your data: hello@carbon.app.