Privacy in Vulcan Drive

This page describes what the current code can process. It does not state that every capability is enabled in every environment. Region, retention period, legal basis, and subprocessors require operational and legal validation before this revision is published.

Account: identity and session data needed to authenticate access. Private Drive: file bytes, name, type, size, versions, folders, and operational states needed to store, list, search, and recover files. Private indexing: extracted content and technical artifacts for the current version, used for search and organization when the corresponding feature is enabled. ONIXBRAIN: the owner chooses which private files to include. Only selected, active sources may feed local knowledge, subject to the current version and authorized access. Removing a file from ONIX prevents new use as a selected source. This local purpose does not authorize transfer to an AI provider or export.

The application has an object storage adapter for Backblaze B2 and uses Supabase for identity and structured data. This describes the implementation and does not confirm the region, contract, or configuration of a specific environment. Assisted organization has a conditional Google Gemini transport. Its mode can be off. The AI gateway is a separate capability and does not prove that a request occurred. The worker has a conditional integration with a self-managed OCR service for eligible documents. Disabled OCR is not automatically replaced by another provider.

Drive reads are scoped to the authenticated user. Transfer URLs are temporary, and the server revalidates identity, current version, and purpose for sensitive operations. Diagnostics accept enumerated technical fields and bounded pseudonyms. Pseudonymization is not anonymization. Revoking a source prevents new application use after confirmation. It cannot retrieve bytes already sent, downloaded exports, or data already viewed on another device.

This revision does not publish a retention period, processing region, legal basis, or contractual subprocessor list without responsible confirmation. For data questions or requests, use the contact channel shown in the product. The applicable response depends on verified identity and current obligations.

Files included in ONIXBRAIN are within the scope of account AI permission, including new files and versions while the decision is active. Files only in Drive are excluded. Content serves only the owner's account features and will not be used to train models. Improvement statistics are aggregated and contain no personal information. Operational security and diagnostic logs have their own purpose and retention and are not part of these statistics. The user can withdraw the decision in settings, blocking new AI uses. Permission does not start paid processing or replace checks for access, selection, version, protection and central policy.