Privacy Policy
Last updated 2026-10-28
In short
- Particle keeps your chats, memory, pictures and files so you can use them again. They stay until you delete them.
- To answer you, the message content goes to OpenRouter and the AI companies behind it. Under OpenRouter's policy they do not train on it.
- We never sell your data. We show no ads.
- You can download everything or delete your account at any time in Settings.
- Our visitor counts use no cookies and never store your IP address.
1. Who we are
Particle is run by Morijor, a registered partnership in British Columbia, Canada. In this policy, "we" and "us" mean Morijor.
If you have a question about your privacy, write to particlebuddy@gmail.com or use the Get help page. That address also reaches the person responsible for privacy at Morijor.
2. What we collect
Your account - Your email address and a password. The password is stored by Supabase in a scrambled (hashed) form. We cannot read it. - Your plan, when it renews and whether a payment failed. - Your settings, such as theme, memory on or off, and voice on or off. They are saved to your account so they follow you to every device you sign in on.
What you put into Particle - Your chats: the messages you send and the replies you get, and each chat's title. - Memory: short facts Particle saves about you, like your name, your city, your job or how you like answers. Only one fact at most is saved after a reply, and only when your message talks about you. - Pictures you ask Particle to make. - Photos and files you upload (PNG, JPG, WebP, PDF, text, Markdown and CSV), and the text we read from them. - Projects: their names, instructions and files. - Share links you make, and the list of chats others have shared with you. - Picture edits, with the earlier versions of each picture. - Agents you make in Agent World: their names, instructions, tasks, schedules, files, memory and the record of what they did. - Connections you give an agent, such as a GitHub token, an API address and key, or a webhook address. These secrets are stored encrypted and are only used when your agent runs. - API keys you make for the Particle API. We store only a scrambled (hashed) copy, so we cannot show a key again after you create it. - If you are on a team: the team name, its members and their roles, and the projects, memory, files and agents shared inside the team. - Support requests you send us.
Payments - Stripe handles all payments: your plan, team seats, Agent Pool top-ups and shop items. - We keep your Agent Pool balance, how much you gave each agent, what each agent spent, and which shop items you own. - Stripe handles all card details. We do not see or store your full card number. Stripe tells us whether a payment went through, and we keep a record of any refund.
Usage counts - For each request, including API calls, we store the date, which AI model was used, how many words in and out (counted as tokens) and the estimated cost. We do not store the content in these records. We use them to run your monthly limit and to keep the service affordable.
Visits to the website - We count page views without cookies. We do not store your IP address. Instead we make a one-way code from your IP address, your browser type and a random value that changes every day. We delete the old random values after a day, so a visit cannot be linked back to you or to your visits on other days. - We record the page, where the visit came from, and your rough device type, browser and country. We drop anything after a "?" in the address. - If your browser sends Do Not Track or Global Privacy Control, we do not count the visit at all.
Keeping the service safe - To stop abuse, we briefly hold a count of sign-in and sign-up tries for each IP address. These counts expire after 15 minutes.
3. How we use it
- To answer your messages, make pictures and read your files.
- To remember things about you, if memory is on.
- To run your account, your plan and your monthly limit.
- To answer support requests.
- To keep Particle safe and working, and to plan costs.
We do not use your chats for advertising. We do not sell or rent your data to anyone.
4. Who else sees your data
We use a few companies to run Particle. Each one gets only what it needs for its job.
| Company | What it does | What it receives |
|---|---|---|
| OpenRouter and its model providers (DeepSeek, Qwen, OpenAI, Google) | Write replies, read photos and files, make pictures, name chats and pick memory facts | The message content needed to answer, including recent messages in the chat, your memory facts, project instructions and file text |
| Supabase (United States, east region) | Stores accounts, chats, memory, pictures and files | Everything stored in your account |
| Stripe | Takes payments | Your email, payment details and billing address |
| Netlify (United States) | Hosts the website and runs our server code | Your requests as they pass through |
| Resend | Sends emails, such as sign-in links, receipts for your plan and support replies | Your email address and the message we send |
| GitHub, or any service you connect to an agent | Lets your agent do the work you asked for | Only what that task sends, using the access you gave |
| Automation tools you choose, such as Zapier, Make or n8n | Receive updates from your agents | The webhook messages you set up, signed so you can check they came from us |
| OpenRouter web search, only when a message needs fresh facts | Finds fresh facts on the web | The words of your message that need searching |
| Cloudflare Turnstile, only if the bot check is on | Checks that a real person is signing in | Basic browser details |
Under OpenRouter's policy, OpenRouter and the model providers it sends your messages to do not train their AI on that content.
Voice. The microphone and the read-aloud speaker use your own browser's speech features. We do not receive or store any sound. Some browsers, such as Chrome, send your voice to their own maker to turn it into text. That happens under your browser's privacy policy, not ours.
Share links. If you share a chat, anyone with the link can read that chat. Stop sharing removes the link.
Teams. Things you put in a team space can be seen by the members of that team. The team owner sees seat and billing details, and the Agent Pool of the team. Your personal space stays private to you.
The API. Anything you send through your API key is handled like a chat message, and the replies come back to the program that holds the key. Keep your keys private. You can revoke one at any time in Settings.
Our team. Our admin tools show counts, costs and account details. They do not show chat titles or messages. We only look at the content of your account if you ask us to in a support request, or if the law requires it.
The law. We may share data if a court or the law requires it. Where we are allowed, we will tell you first.
5. Where your data is stored
Your data is stored in the United States, mostly with Supabase in its US east region. The AI model providers may process your messages in other countries. This means the laws of those countries may let their authorities ask for the data. We pick companies that promise to protect it.
6. How long we keep it
- Chats, memory facts, pictures, uploaded files, projects, agents and API keys stay in your account until you delete them, or until you delete your account.
- When you delete your account, we delete your profile, chats, messages, memory, pictures, files, projects, share links, agents, their connections and your API keys straight away.
- A few records stay, with your account details removed: usage counts (model, tokens and cost) and refund amounts. Stripe keeps the record of every payment, including Agent Pool top-ups. We need them for our accounts and taxes.
- Stripe keeps its own payment records, as the law requires.
- We keep a private daily backup copy for 14 days, and our database provider keeps its own backups for a short time. Deleted data drops out of these backups within 14 days as they are replaced.
- A short log notes that an export or a deletion happened, with counts only.
7. Your choices and rights
- See and download your data. Settings, Download my data. You get one file with your profile, chats, messages, memory, pictures and file links.
- Delete things. Delete any chat, memory fact, project, file, agent, connection or API key at any time.
- Turn off memory. Settings or the Memory page, "Particle remembers things about you". You can also choose Forget everything.
- Delete your account. Settings, Delete my account. This also cancels your plan.
- Ask us. You can ask us to show you, correct or delete your data, or ask how it was used. Write to particlebuddy@gmail.com. We answer within 30 days.
Canada's federal privacy law (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA) apply to Particle. If you are not happy with our answer, you can complain to the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada.
8. Cookies and storage in your browser
We use no advertising or tracking cookies. Your browser stores what is needed to keep you signed in and to remember your theme until your account settings load. The app also saves the page layout so it opens faster. It never saves your chats this way.
9. Keeping data safe
- Data travels over encrypted connections (HTTPS).
- Each person can reach only their own chats, memory and files. The database checks this on every request.
- Uploaded files sit in a private store and open through links that expire.
- Agent connection secrets are stored encrypted. API keys are stored only in scrambled form.
- Payments and webhook messages are checked with signatures, so nobody can fake them.
- Our staff sign in with a password and a second step (a code from an app).
No system is perfect. If a breach puts your data at real risk, we will tell you and the privacy regulators as the law requires.
10. Age
Particle is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you think a younger person has an account, tell us and we will delete it.
11. Changes to this policy
If we change this policy, we will update the date at the top. For big changes, we will email you before they take effect.
12. Contact
Morijor, British Columbia, Canada Email: particlebuddy@gmail.com Or use the Get help page.