Your company’s thinking lives here. Here’s how we treat it.
Priors holds the most sensitive thing a startup has — what it believes and why. This page says exactly what we store, who touches it, and what we will never do with it. No badge wall; if a claim isn’t verifiable, it isn’t here.
What we will and won't do
Your company memory is never used to train models — ours or anyone else's.
No person at Priors reads your captured content. Debugging happens on metadata and our own seed workspace, not on yours.
Row-level security on every table in the database, enforced by the database itself — plus API keys scoped to exactly one workspace. We test that cross-tenant reads fail.
Encryption at rest (managed-database default), TLS in transit, secrets in a vault — never in code.
We ask for the least access that works and never write to your email, Slack, or docs. The exact scopes are listed below.
Exactly what lands in your workspace
- Originals you send us: forwarded emails, meeting transcripts, and uploaded documents — kept immutable so every claim can be traced to its source.
- What we derive: evidence cards, hypotheses, experiments, decisions, commitments, and the people registry — all citing the originals.
- Account & billing: your email, workspace membership, and Stripe customer ids. Card numbers never touch our servers — they go straight to Stripe.
- Funnel events: which onboarding steps happened, by promo cohort. No third-party trackers on this site.
One-click full export (JSON + Markdown zip) and hard delete of the workspace including raw sources within 24 hours. Your data is yours; leaving is cheap.
Who else touches your data
That’s the whole list. No analytics suites, no ad pixels, no data brokers.
The least access that works
Forwarding to your universal inbox needs no OAuth at all — you choose every message that reaches us.
No SOC 2 yet — here's what we do instead
We’re a pre-seed team, like you, and a SOC 2 audit is months of runway we’d rather spend making the product worth trusting. What you get today: database-enforced tenant isolation with a failing cross-tenant test in CI, least-privilege read-only scopes, encrypted storage and transport, secrets in a vault, and export-and-delete that actually deletes. When the audit happens, it will confirm this page rather than replace it. Questions, or something here you need stronger before you can use us — write to us and we’ll answer plainly.
Ready when you are — the card comes at signup, the first month is free, and everything above applies from the first byte.
Set up your workspace