How we protect your data: a two-minute privacy check before you paste

Every AI company says it takes your privacy seriously, and the phrase has stopped meaning much. So here is what happens to your data when you use the Raven app, DCode and the DipoleML API, in plain terms, followed by a two-minute check that works on any AI app, ours included.

What happens to what you send?

When you are signed in, your Raven chats are saved, so they are there on your other devices and when you come back. When you are not signed in, chats stay on your device. What you send is encrypted in transit and at rest.

Your content is used to develop, improve and train our own models. It is never sold, never used for advertising, and never used to train models for anyone else. Access to stored content is limited to the team members who need it to operate and improve the service. The records that run plans and billing describe activity, such as request and token counts, and never include the words of your conversations.

The system around the models, from reasoning you can read to how stored content is handled, is described in Inside the Raven system.

Which law protects your data?

Retention is the part of privacy people ask about. The law that applies decides more: it sets what a company may do with your information and what you can do about it, and it does not change with a notice nobody reads. We are a Canadian company, so your personal information is handled under Canadian privacy law. Under PIPEDA you can ask to see what we hold about you, ask us to correct it, and, if we do not resolve a concern, complain to the Office of the Privacy Commissioner of Canada.

What should you ask any AI app before you paste?

Five questions, two minutes. A vendor that cannot answer them quickly, in writing, has told you something too.

• Who trains on what? Ask whether your content trains the vendor's own models, anyone else's, or both, and get the answer in writing
• How long is it kept? Get the number. Then ask what happens to attachments and code, because that is where the interesting files live
• Who can see it? Staff, subcontractors, reviewers, "trusted partners": push on this one and the list tends to grow
• Which law protects it? Ask where the company is based and which privacy law it answers to, then check what that law lets you do
• Can you delete it? Ask how, and how long it takes to be gone

How do we answer those five questions?

Ours, for the record. Your content trains our own models and no one else's, and it is never sold or used for advertising. Chats are kept until you delete them, and removed within 30 days after you delete your account. Access to stored content is limited to the team members who need it. Your personal information is handled under Canadian privacy law. You can delete any chat at any time, delete your account at any time, and ask privacy@dipoleml.com to delete specific records sooner, subject to what the law requires us to keep.

Every one of these answers is in our Privacy Policy, written in plain language so it can be checked rather than trusted.