Privacy, in practice

Security & data

Privacy is the whole point of Hathi. This page is the long version: how your data moves through the service, what we do with it, and where the limits of our promises sit. Plain English, no jargon.

Where your data lives

Your conversations and the memories Hathi builds from them are kept in storage dedicated to your account. That storage is encrypted at rest and kept separate from everyone else's. It isn't pooled, and it isn't shared between accounts. What you tell Hathi stays with your account, and nothing you send becomes visible to, or mixed into, someone else's.

What we do and don't do with it

We use what you send for one job: to answer you and to build the memory that makes Hathi useful to you. Hathi does not turn your conversations into training data, and there is no setting that switches that on. Hathi simply has no training of that kind. If we wanted to use your content to understand where the product falls short, we would ask you first, and only in a form that does not identify you.

You stay in control of all of it. From your dashboard you can see everything Hathi remembers, export it as a readable file, and delete any single memory, or everything at once.

How your messages are processed

Hathi's memory, and the way Hathi finds what Hathi knows, run on our own systems. For some tasks we ask a third-party AI provider to help, and we choose providers whose terms keep your content private and stop them seeing what you send. DeepInfra is one example. Before anything leaves our systems, we strip or blur identifying detail so the provider cannot rebuild what you sent. Your memory stays with us.

We don't train on your conversations, and we don't use them to improve anyone's AI. You can see, export or delete everything Hathi remembers at any time from your dashboard.

Retention & deletion

Memories and channel data stay until you delete them or close your account. Deleting a single memory removes it right away; deleting your account starts a cascade that clears your memories, channels and usage records. When you ask us to delete, we remove what you've told us from live storage and from the backups that hold it.

Billing records are the one deliberate exception: UK tax law asks us to keep them for up to 7 years. Those records hold transaction metadata only, never your conversations.

Access & who can see what

Your conversations and memories are yours alone. The operators who keep Hathi running work with the system rather than its contents, so they can't read your conversations. Only you can, by signing in as yourself. If you contact support, you choose what to share with us, and that stays scoped to your request.

Where we are

Hathi is built and run in the United Kingdom. That means UK data protection law applies to us, and our lead supervisory authority is the UK Information Commissioner’s Office. We keep the systems that hold your data close to home.

Reporting a vulnerability

If you find a security problem, please tell us. Email security@hathi.chat with enough detail to reproduce it, and give us a reasonable chance to fix it before you tell anyone else. We don't run a paid bug-bounty programme, but we will acknowledge your report and keep you updated on what we do next.

Questions this page doesn't answer? Our privacy policy covers the legal detail, and you can always reach us through our contact form.