Privacy Policy

Data Storage

Your documents are stored:

• Locally on your device
• Optionally synced to the Jazz Cloud when you create an account

Encryption

Your data is end-to-end encrypted:

• Encryption keys are derived from your passphrase
• Your passphrase unlocks your personal Alkalye account
• Jazz sync servers cannot decrypt your documents. Authorizing an MCP connection lets Alkalye’s hosted server decrypt content as your account.
• When you share documents, collaborators can decrypt them using their own passphrases

MCP connections

When you connect ChatGPT or another MCP client:

• You authorize Alkalye’s hosted server to use your account key. Your passphrase stays on your device.
• The connected client acts as you and can access documents and spaces under your existing Jazz permissions.
• Content returned by an agent tool is sent to the AI provider and is then subject to that provider's terms and privacy policy
• Jazz permission changes apply to future tool calls.
• Disconnecting revokes that connection’s OAuth access. It does not remove your own access.

The hosted server decrypts your account credential and processes content in memory to answer tool calls, even while your app is closed. Credentials stored in your private Jazz root and OAuth tokens are encrypted with a server-held key. The server operator can decrypt these credentials; encryption does not hide them from the server.

Depending on the tool, shared data may include document and space names and identifiers, Markdown content, revisions, timestamps, comments, comment status, and collaborator display names. OAuth access and refresh tokens contain the encrypted account credential and expire. The connector temporarily keeps short-lived replay-prevention identifiers in server memory, not document content.

Analytics

We use privacy-preserving, aggregate product analytics. We do not use document contents for analytics.

Contact

For privacy concerns: assmann@hey.com