Confiance · Windrose Institute
Trust · how we handle your data

Your idea never leaves the building.

Inference runs on our own hardware, not a third-party API. Your inputs are not training data. Deletion is a protocol, not a promise. This page states exactly what that means, in plain terms.

LOCAL-FIRST

Inference on our own hardware.

The cognition model runs on machines we control, not a hosted API. Your idea is not forwarded to a third party to be processed.

NOT TRAINING DATA

We don't learn from your inputs.

What you type is used to run your simulation and build your own memory. It is never pooled into model training.

DELETION IS A PROTOCOL

Erase, and a tombstone remains.

When you delete, the content is removed and a record notes that it stood here and was erased. Provable deletion, not a silent gap.

What we hold, and for how long

Every piece of data has a class and a lifetime.

We keep the minimum. Personal and confidential data are erasable on request, and erasure is logged. Nothing sits in a second, forgotten copy.

DATA
CLASS
ERASABLE
Your idea & variants
CONFIDENTIAL
YES
Email (waitlist / account)
PERSONAL
YES
Run results & memory
CONFIDENTIAL
YES
Population frames (public)
ORG KNOWLEDGE
N/A
The deletion protocol

What happens when you ask us to forget.

01
You request deletion.

From your account, or by writing to hello@windrose.institute. No forms to chase, no retention dark patterns.

02
The content is removed.

Your inputs, results and memory entries are erased from live systems and backups on the next cycle.

03
A tombstone is written.

A minimal record notes that data stood here and was deleted on a given date, under your request. It holds no personal content, only the fact of erasure. That is how deletion stays provable.

A question about your data?

Full terms and privacy are on the way. Until then, a human answers: hello@windrose.institute.