Privacy policy

Last updated 21 October 2026. Questions and requests: info@factograph.app.

Who we are

FactoGraph (www.factograph.app and api.factograph.app) is responsible for the data described here - its controller under the EU General Data Protection Regulation (GDPR). Write to info@factograph.app about anything in this policy.

What FactoGraph stores

A knowledge store's contents: the facts you approved, the documents you added, and the relations between them, so that you and the assistants you connect can read them.
The work of a step while it runs: the question or message it was started with, and the prompts and replies exchanged with your assistant. A step's state is kept in memory only while it runs.
Request logs: the address a request came from, its time, method and path, with every store id replaced and no query, so no store key or question is written to the logs. For MCP connections, the name and version the assistant gives for itself. Logs are rotated and kept only as long as they fit in a small fixed size.

FactoGraph has no accounts: a store is reached by its link, which is its key. We do not ask for your name or email to use it. A store holds whatever you approve into it, so it holds personal data only if you put some there.

What we receive through ChatGPT, Claude and other assistants

When you use FactoGraph from an assistant - the FactoGraph app or plugin, or its MCP connector at https://api.factograph.app/api/mcp - the assistant calls FactoGraph's tools, and we receive only what it puts into those calls:

the store link it uses: a public link, or your store's private link when you give it one;
your question, the message to find facts in, the facts you approved, a document's text, or the facts to delete - depending on the step;
the assistant's replies to the prompts a step gives it;
the name and version the assistant gives for itself.

We do not receive your ChatGPT, Claude or other account, your name, email, location, or the rest of your conversation, and we do not ask the assistant for them. What we receive is used only to run the step you asked for and to keep what you approved.

Who can see a store

A store's private link reads and changes it. Anyone who has the link can, so keep it private and give it only to assistants you trust.
If you make a store public, anyone with its public link can read it and ask it questions, but not change it. You can make it private again, or give it a new public link, at any time.
The assistant you connect (Claude, ChatGPT or another) processes what it reads and what you send it under its provider's own policy. FactoGraph runs no language model of its own.

We do not sell store contents, use them to train models, or share them with anyone except the assistants you connect. We use Amazon Web Services to host FactoGraph and Google Analytics on the website (below); neither may use store contents for its own purposes.

Why we use it

Store contents and the work of a step: to give you the service you asked for (GDPR Article 6(1)(b)).
Request logs: to keep the service running and secure, and to see which assistants use it - our legitimate interest (Article 6(1)(f)).
Website analytics: to count visits - our legitimate interest (Article 6(1)(f)); you can block it, as below.

Where and how long

Stores are kept on Amazon Web Services in Frankfurt, Germany (eu-central-1), reached over HTTPS through Amazon CloudFront.
A store's contents are kept until you empty it from its page, or ask us to delete it. The disk is backed up daily and the last 7 backups are kept, so deleted contents leave the backups within 7 days.
Google Analytics may process website visit data in the United States, under the safeguards Google provides for transfers from the EU. Store contents never leave the EU through FactoGraph.

How we protect it

Every connection uses HTTPS.
A store's private link is a long random key that cannot be guessed. Store ids are removed from request logs and from the addresses sent to analytics, and search engines are told not to index any store's pages.
Only the people who run FactoGraph can reach its servers.

The website

www.factograph.app uses Google Analytics to count page views. Store and fact ids are removed from every address before it is sent, so Google never receives a store's key. Google Analytics sets cookies; you can block them in your browser without losing anything on the site.

The site also keeps the links of the stores you made in this browser in a cookie of its own (kc_stores), so they are there next time. It never leaves the site; clear it to forget them.

Your rights

You can see, correct, export and delete a store's contents yourself through its private link: its page shows every fact, lets you remove facts or empty the store, and exports it as a file. You may also ask us to access, correct, delete, restrict or hand over personal data, or object to how we use it: write to info@factograph.app. Since stores have no owner accounts, include the store's link so we can find it. If you are in the European Union you may also complain to your data protection authority.

Children

FactoGraph is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child's personal data is in a store, write to us and we will delete it.

Changes to this policy

When this policy changes, the date at the top changes with it. A change that affects what we store or who sees it is also said on this page.