Privacy

What the platform holds

• Your account. An email address, a password hash or a passkey, and a display name if you gave one.
• Your files. What you upload, their version history, and what has been deleted but not yet purged from the trash.
• Search and assistant activity. Your queries, your conversations with the assistant, and which of your documents it drew on to answer.
• Verification. The fact that you have been verified, and the details you attested to. Verification belongs to the person, not to any company they claim.
• Wallet and Cayso. Your balance, your holdings and their status, and the transfers you have made or received.
• Claims. Which company officer roles you have claimed, and the review record when a claim is contested.

Where it lives

Each signup gets its own tenant unless it is joining a shared community, and tenants are walled off from each other in the database itself — not by application code that remembers to filter. On a community deployment, file contents are held by the community-run storage network: erasure-coded across machines that citizens operate, so no single node holds a usable copy of anything.

What the assistant sees

The assistant answers from your documents, which means it reads them. It is grounded on your own workspace and shows which files it used. Its conversations belong to your workspace like any other content.

The register is public already

Company and officer data in the register mirror comes from Companies House, refreshed through the official APIs. That information is a matter of public record before Piper ever touches it. Your claim over an officer role, by contrast, is yours.

What a real policy still has to answer

• How long deleted files and purged accounts are retained, and by whom.
• The lawful basis for each kind of processing, and who the data controller is.
• Which third parties are involved — email delivery, the model provider, hosting.
• How to exercise access, correction, portability, and erasure rights.
• Where data is processed geographically, and what leaves the country.

Until it exists, treat this page as a description and not a promise. See also Terms, which is placeholder text in the same way, and Contact if you need to reach someone.