Privacy and your data
Privacy is the point of The Archivist. This page says plainly where your archive is, what reads it, and how to take it with you or remove it.
Where it’s kept
Section titled “Where it’s kept”- Your archive, with its text, its search index and everything the curator built, is kept on Cloudflare in the European Union, separately from everyone else’s. No other user can open it.
- Your files, the originals of what you synced, are kept on Cloudflare in the EU too.
- Email passwords: the app password for each email account is stored encrypted in your archive, and never shown again.
- Access tokens are stored only as fingerprints that can’t be turned back into the token.
Your archive isn’t encrypted with a key only you hold. The service reads it to search it, answer your questions and curate it, so it can do that while you’re away and when your agents ask.
What reads it
Section titled “What reads it”Cloudflare-hosted models, on Cloudflare’s Workers AI:
- Search turns text into vectors with BGE-M3, so it can search by meaning.
- Curation uses Gemma 4 26B, with each fact and event checked by Cloudflare’s Clef-flash model.
- Answers to your questions use Qwen3 30B.
No other company’s model sees your archive unless your account has agreed to it. An account can opt in to curation by Anthropic’s Claude; there’s no setting for this in the app, and it’s never turned on without your agreement.
Cloudflare doesn’t promise to run its models inside the EU, so model calls may be processed outside it, even though your archive is stored there.
What’s logged
Section titled “What’s logged”The service’s logs hold IDs, counts, timings and error codes only. They never contain your documents, your questions or answers, names or email addresses.
Your agents
Section titled “Your agents”Agents read your archive only after you approve each one, and you can revoke any of them in Settings → Agents. See Connecting your agents.
Exporting everything
Section titled “Exporting everything”Settings → Account → Export everything makes a zip of every original file, and your archive’s data as JSON lines: documents, people, places, facts with their sources, events, projects and the curator’s suggestions. A README inside explains the files.
The download link works for 24 hours, and the export file is deleted after 7 days.
Deleting your account
Section titled “Deleting your account”Settings → Account → Delete account deletes everything: your archive, its files, your connected apps and your tokens. Type your email address to confirm. It can’t be undone.
The mail, notes and files in your own accounts and folders are untouched: The Archivist only ever read them. If you sign in again later with the same Google account, you start with a new, empty archive.