Security
This describes what earcue does today. It is not a certification: earcue has not been audited for SOC 2 or ISO 27001.
Reporting a vulnerability
Email security@earcue.lol with what you found and how to reproduce it. We acknowledge reports within three business days and will not take legal action against research done in good faith with your own account. Please do not open a public issue or touch other people's data.
Where your data is
The app runs on Cloudflare Workers. Your data is stored in Neon Postgres, reached through Cloudflare Hyperdrive, and the models run on Azure OpenAI. The full list of services that handle your data is in the privacy policy.
Encryption
Connections to earcue use HTTPS, and earcue reaches its database and models over TLS. The access tokens and API keys for the sources and services you connect (Google, Slack, any other service) are also encrypted with AES-256-GCM before they are stored. Passwords are stored only as salted hashes.
Who can see your data
Your mail, chats, memories and recommendations are stored under your account, and every request is checked against your session. In a company account, admins see counts (members, recommendations made and acted on), never your items, memories or chats. Records of each model run hold ids and counts, not your mail, chats or memories, and are deleted after 30 days. The one exception is what earcue looked up while answering you: its search words, up to 200 characters each, are kept in that record, as the privacy policy describes.
Content from other people
Mail, documents and pages you import were written by someone else, and some of it tries to instruct an AI. earcue passes it to the model marked as untrusted and removes passages that address the model. Ask earcue changes or deletes a memory, or asks a connected service to act, only on a message you typed yourself, after a separate check that your own words asked for it. An action in another service also waits for you to press Confirm.
Your control
You can export everything earcue holds about you, or delete your account and all its data, from your account page. Disconnecting Google or Slack deletes the mail, events and messages earcue synced from it; for the browser and Fiverr, disconnecting stops the sync and removing the import deletes what was sent. Memories earcue already learned from a source are not deleted with it, except those from an import you remove; you can forget any memory in Memory.
How the code is kept safe
Every pull request is checked for vulnerable dependencies and committed secrets. Every page is served with security headers: HSTS, protection against framing and content-type sniffing, and a permissions policy that turns off the camera, location, payment and USB access and keeps the microphone and screen capture to earcue's own pages.