Security

How your library is protected

Per-user isolation, enforced by the database. Every row of your content carries your identity, and Postgres row-level security policies enforce that boundary on every query. Isolation is not an application habit here; it is a database rule.

Encrypted in transit and at rest. All traffic runs over TLS, and your data is encrypted at rest by our infrastructure providers.

Your content is yours

We do not use your content to train or improve AI models. Our service providers process your content only to return a result, and may keep it for a limited time under their own policies (for example, for abuse monitoring). We are requesting zero data retention wherever a provider offers it.

Export anytime, delete in one click. Your account settings include a full export of everything you have saved, and an account deletion that removes your content from our systems, cancels billing, and scrubs personal details from our payment processor.

Transparent vendors. Every third party that touches your data is listed on our sub-processors page. We do not sell your data. Ever.

Reporting a vulnerability

Found something? We want to know. Email team@graniite.co.