privacy
your words stay yours.
what you bring into a room is sensitive. here is exactly where it goes, who can see it, and how you get rid of it.
the fine print
disclosures & your rights.
the plain-language summary lives here. the full legal text sits behind the two links, both effective 24 july 2026.
documents
the versions that actually bind us. worth reading before you sign up.
where it goes
held safely, used for a short list of things.
encrypted in transit and at rest
everything you write is encrypted on the way to us and while it sits in the database. passwords are kept only as salted hashes, and one account cannot read another's.
used to hold the room, and to draw your arc
your sessions are read to hold the conversation, produce your resolution cards, and build the arc and recall that belong to you. both are automated, and you can switch them off.
never sold, never trained on
we do not sell your data, share it with advertisers, or run ad tracking. your conversations train no model of ours, and our contract with anthropic means they train none of theirs.
who sees what
what is shared, and what is only yours.
kept between you
kept to yourself
a shared room holds two people's words, so we cannot erase half of it. delete your account and your solo content goes outright, while in a shared room your name is stripped and your words stay in the other person's copy, unattributed. ask us and we will put it to them, and if you both agree the whole room goes. export your full history at any time, no questions asked.
handled with care
the seriousness you are trusting us with.
stored in the us
supabase, vercel, anthropic and stripe. subject to that country's laws.
encrypted
in transit and at rest, always.
never trained on
your conversations are not our model's data.
essential cookies only
enough to keep you signed in. nothing to opt out of.
oplos is a structured conversation tool, not professional care, and not a crisis service. if you or someone else is in danger, close oplos and contact an emergency service.
a question about your data?
we'd rather you ask. reach a real person, not a ticket, and always within 30 days.