Privacy and Data Retention
This service stores uploaded source content and generated wiki artifacts for authenticated users. Data is logically isolated by user ID in the database and storage paths.
What is stored
- Uploaded source files in the private `raw-sources` bucket.
- Parsed source entries, wiki pages, links, and query artifacts in Supabase.
- Derived artifacts (`index`, `log`, backlinks) in private `wiki-artifacts` storage.
Retention
- Source and wiki data is retained until account data is explicitly deleted by operators.
- Operational logs should be retained only as long as needed for reliability and security.
- Backups should follow your infrastructure retention policy and legal obligations.
Security controls
- Authentication is required for dashboard and API access.
- Row Level Security policies are scoped to `auth.uid()` for user-owned records.
- Storage access policies restrict object paths to user-prefixed folders.