Privacy
Hax is an open-source chat assistant that answers questions from the documents you upload. This page says what it stores and who else touches that data.
What is stored
- Your account: email address, a hash of your password (never the password), or, if you sign in with Google, the identity and name Google reports.
- Your conversations: the messages you send and the replies.
- Your uploads: the files themselves, and the text and numeric embeddings derived from them for search.
- Your note about yourself, if you write one.
- A session cookie so you stay signed in; it carries your account id, email address and name. There are no advertising or analytics cookies.
- If you try Hax without an account, a guest session cookie and the few messages of that demo, which are deleted after a few days.
- Your network address, for up to a day, in counters that limit sign-up and demo attempts, and in request logs that rotate within days.
Who processes it
- Amazon Web Services (US East) hosts the database and file storage.
- Anthropic receives your messages, your note about yourself and relevant excerpts of your documents to generate replies.
- Voyage AI receives document text, and the search queries derived from your messages, to compute embeddings.
- Resend delivers verification and password-reset emails.
- Google provides sign-in if you choose it; Hax receives only your email address, name and profile picture.
Nothing is sold, and nothing is used for advertising.
Isolation and deletion
Each user's conversations and documents are visible only to that user, enforced in the database. Deleting a conversation or a document in the app removes it and everything derived from it right away; database backups holding a copy expire on their own within days. To delete your account and all its data, email the address below.