Privacy Policy

We store the minimum we need to run the Service: your Google account profile (name, email, avatar), the prompts you write, the AI-generated commands, and your uploaded files.

Uploaded files and generated outputs are deleted automatically 24 hours after they're created.

We do not sell your data. We do not train models on your files.

Account: your name, email, profile picture, and Google account ID (received from Google sign-in).

Content: files you upload, prompts you type or speak, AI-generated commands, output files, and the metadata around each chat turn (status, timestamps, file names).

Voice: when you use voice input, the raw audio is sent to our transcription provider and to ReFile's API only to produce the text. We do not retain the audio.

Usage: standard server logs (IP, user agent, request paths, timing) for security, billing, and debugging.

Cookies: a session cookie to keep you signed in. We do not use third-party advertising trackers.

To run the Service — accept uploads, generate commands, execute them in a sandbox, hand back outputs.

To keep you signed in and prevent abuse.

To debug failures and improve quality. Aggregated, non-identifying metrics may be used to understand which tools and prompts are most useful.

We do not use your prompts, files, or outputs to train AI models.

We rely on a small set of vendors to operate ReFile. Each handles a narrow slice of data:

• Google — sign-in (authentication only).

• Convex — application database and file storage (encrypted at rest).

• Modal / Vercel Sandbox — sandboxed shell execution (transient; no persistence).

• OpenAI / Anthropic / Google AI — generation of commands and chat replies from your prompts.

• Vercel — hosting, edge networking, logging.

Each vendor only sees what's necessary for its function.

Uploaded files and AI outputs: deleted automatically 24 hours after creation.

Chat metadata (prompt text, command, status, file names): retained until you delete the chat or your account.

Account data: retained while your account is active; deleted within 30 days of an account-deletion request.

Server logs: typically rotated within 30 days.

You can view your chats and delete any of them from the sidebar. You can request a copy of your account data or full deletion by emailing the address below.

Depending on where you live, you may have additional rights (access, correction, portability, objection) under laws like the GDPR (EU/UK) or CCPA (California). We honor all of them.

All connections use TLS. Files are stored encrypted at rest. Shell execution happens inside isolated sandboxes — never on shared infrastructure with other users. See our Security page for more.

Our servers and sub-processors are located in the United States and the European Union. By using the Service you consent to your data being processed in those regions.

ReFile is not intended for children under 13 (or the minimum age in your country). We do not knowingly collect data from anyone in that age range.

We'll post any updates here with a new “last updated” date. Material changes will be communicated by email or an in-app notice.

Privacy questions or requests: privacy@denoiselabs.com.