Privacy
Plainly: what we process, where it is kept and how to remove it.
Controller
Gabriel Antony Xaviour (individual), contact@cosmiclan.com. You are using an AI system.
What is stored where
| Data | Where | How |
|---|---|---|
| Your case (profile, facts with their sources, documents, deadlines, tasks, appointments, timeline) | Your private case file on Cloudflare | One isolated store per account; only your signed-in session can read it |
| Your account id, sign-in email and plan | Cloudflare D1 | Your email is used to send sign-in codes |
| Sign-in challenges | Cloudflare D1 | Codes are stored as a keyed hash and expire after 10 minutes |
| Photos and screenshots you add with Look | Sent to Meta's models to be read | Saved to your case only when you add them as documents |
| Audio from voice, Counter and calls | Sent to Muse Voice Transcribe as you speak | Dossierly stores the transcript and summary, not the audio |
| Email and calendar | Read through your connection when you allow it | Only messages from Polish offices and your university are added to your case; dates go to your calendar after you confirm |
| Chat history | This device | Kept in your browser; cleared when you sign out |
Processors
| Who | For what | Notes |
|---|---|---|
| Cloudflare | Hosting, your case file, sign-in records and sign-in emails (Workers, Durable Objects, D1, Email Service) | Global network; its own privacy policy applies |
| Meta (Muse models) | Muse Spark answers and reads letters, SAM 3.1 outlines what it reads, Muse Voice Transcribe turns speech into text | Receives the parts of your case a task needs; Meta's terms apply |
| ElevenLabs | Turns Dossierly's replies into speech | Receives the reply text only |
| Composio | Connects your Gmail and Google Calendar when you choose to | Holds the connection; Dossierly reads only messages relevant to your case |
| Twilio | Places phone calls to you (approved demo accounts only) | Receives your phone number and the call audio |
Health data
Some cases involve health insurance or medical appointments. We process health information only when you choose to enter it, as your explicit consent, and you can ask us to delete it at any time.
Legal basis and retention
- Providing the service you asked for (contract): your case file, letters, deadlines, Counter, calls.
- Explicit consent: health information you choose to add.
Your case file and account record are kept while you use Dossierly and deleted on request.
Your rights
You can ask for access, correction, deletion, restriction, portability, or object to processing, by writing to contact@cosmiclan.com. You can complain to the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), uodo.gov.pl, or to the authority in your EU country.
See also: Terms · Published limitations