Privacy Policy

Last updated: June 3, 2025

What we collect

When you use Seshat, we collect and process the following data:

• Account information — email address and password (hashed with bcrypt, never stored in plaintext)
• Email data — messages synced from your connected IMAP accounts, stored encrypted at rest
• GitHub activity — public comments, issues, and PRs from GitHub users you choose to track
• Feed content — RSS/Atom entries from feeds you subscribe to
• Chat conversations — messages exchanged with the AI assistant, including tool call logs
• Automation configs — schedules and prompts for automated AI tasks

How we store it

• All data is stored in a PostgreSQL database hosted on Fly.io (Singapore region)
• IMAP credentials are encrypted using AES-256-GCM via our credential vault before storage
• Passwords are hashed with bcrypt — we never store or log plaintext passwords
• Database connections use SSL/TLS encryption in transit

Third-party services

We use the following external services to operate Seshat:

• LLM providers (Groq, Z.AI, Google Gemini, Cerebras) — your chat messages are sent to these providers to generate AI responses. We do not control their data retention policies.
• Mailgun — for sending transactional emails (password resets, confirmations)
• Fly.io — infrastructure hosting
• GitHub REST API — to fetch public activity for tracked users

What we don't do

• We don't sell your data to third parties
• We don't use your email content for advertising
• We don't train AI models on your data
• We don't use tracking cookies or analytics beyond session cookies

Your rights

You can:

• Export your data by contacting us
• Delete your account and all associated data from Settings
• Disconnect email accounts at any time — this removes all synced emails
• Request details about what data we hold by emailing us

Data retention

We retain your data as long as your account is active. Conversation events older than 90 days are periodically cleaned up. When you delete your account, all associated data is permanently removed.

Contact

For privacy questions or data requests, email contact@aniketsingh.net.