Effective October 6, 2026

Privacy Policy

Version 2026-10-06.1 · Applies to the United States invitation-only beta.

DiskDrive.ai (“DiskDrive,” “we,” “us,” or “our”) provides a persistence service for files, structured information, and durable AI Memories. We operate from 231 Nixon Drive, Guntersville, Alabama 35976, USA. This policy explains what information we handle and the choices available to you.

Information we collect

• Account information, including your name, email address, login and verification records, policy-acceptance record, and account status.
• Content you or an AI app deliberately save, including files, Memories, folders, source and provenance details, and text extracted from supported files.
• AI connection names, permissions, authorization and revocation records, and audited actions performed through a connection.
• Service records such as usage totals, billing and subscription status, security events, request identifiers, and bounded or hashed network information.
• Information you submit to our waitlist or public issue-report form, including an optional use case, description, URL, or reply address.

How we use information

We use information to create and secure accounts; store, index, search, export, and delete content; authorize AI apps; operate subscriptions; prevent abuse; investigate incidents; provide support; comply with law; and improve reliability. DiskDrive does not sell personal information, share it for cross-context behavioral advertising, or use customer content to train AI models.

AI processing

AI apps you connect are separate services with their own privacy terms. You choose their permissions and can revoke them from DiskDrive. When hosted semantic search is enabled, DiskDrive sends only the extracted text chunks and search queries needed to create numerical search vectors to OpenRouter. OpenRouter routes each request to the selected embedding model provider. OpenRouter states that it logs basic request metadata but does not log prompts by default; downstream model providers have their own retention practices. Its current practices are described in its support documentation and Privacy Policy. DiskDrive stores the resulting vectors with your tenant-bound data.

Service providers and disclosures

We use vendors only to operate the service: VPSDime for application hosting in Dallas, Texas; Supabase for PostgreSQL data; Cloudflare R2 for stored file objects; Postmark for transactional email; Backblaze B2 for independently encrypted database backups in its US East region; Stripe for hosted checkout, subscription, invoice, and payment records; and OpenRouter plus the selected downstream model provider when hosted semantic search is enabled. Payment card details are entered on Stripe-hosted pages and do not enter DiskDrive systems.

We may disclose information when you direct us to, when a provider must process it for us, when required by law, or when reasonably necessary to protect users, the service, or others. Providers may maintain their own subprocessors and process data in locations permitted by their terms and data-processing agreements.

Cookies and analytics

DiskDrive uses essential cookies and similar storage for sign-in, security, and requested product functions. On public marketing and guide pages, we offer optional Google Analytics. It is disabled unless you choose “Allow analytics.” If enabled, it measures page paths, referral and campaign information, device/browser details, approximate geography, and selected public-page actions such as a waitlist-button click. We do not send account IDs, archive content, AI prompts, support or abuse reports, or authenticated product-page activity to Analytics. We do not use this data for advertising profiles.

Your choice is stored in your browser. You can reopen “Analytics choices” on any public page to allow or decline analytics later. Google may process permitted analytics data under its own terms and privacy documentation.

Retention and deletion

Active account content remains until you delete it or close the account. Items in Trash are scheduled for permanent deletion after 30 days unless removed sooner. Encrypted logical database backups are retained on a rolling 35-day schedule and are not restored into normal service without reapplying deletion queues. Waitlist entries remain until invited, withdrawn, or removed during periodic stale-request review. Unused invitations and closed support or abuse records are reviewed and removed under our internal retention schedule.

We retain limited billing, security, audit, usage, policy-acceptance, and legal evidence for as long as reasonably necessary to prevent fraud, resolve disputes, maintain the integrity of append-only records, and meet accounting or legal obligations. Account deletion revokes credentials and schedules customer content, derived search data, and storage objects for deletion; identifiers retained as evidence are minimized or redacted where appropriate.

Security

DiskDrive uses tenant-bound authorization, encrypted transport, restricted signed URLs, checksum verification, malware scanning, credential redaction, auditable agent actions, and encrypted independent database backups. No online service can guarantee absolute security.

Your choices

You can review and revoke AI access, correct or archive Memories, download an export, cancel a subscription, and request account deletion from the product. You may ask to access, correct, or delete personal information, or withdraw a waitlist request, through our public report form. We may need to verify your identity before acting on a request.

Eligibility, location, and changes

The beta is offered only to people in the United States who are at least 18 years old. It is not directed to children. We may update this policy as the beta changes. Material changes will receive a new version and effective date and, when appropriate, an account or email notice.

Contact us

Submit privacy, security, or data-rights questions through the public report form, email abuse@diskdrive.ai, or write to DiskDrive.ai, 231 Nixon Drive, Guntersville, AL 35976, USA.