What the service receives
Cloud receives the information needed to authenticate an account, operate a paid API, and execute the memory requests that a customer sends to it. That can include:
- account information such as an email address, password hash, session metadata, and verification/reset records;
- billing and subscription metadata handled with Stripe; Stripe processes payment-card details;
- API keys, request metadata, and usage counters;
- memory payloads, queries, and entity identifiers submitted to the hosted Vault backend; and
- bounded client-error telemetry described in Telemetry.
Important boundary: the hosted API is not currently advertised as a zero-knowledge service. It uses server-configured Vault encryption and receives the payloads required to provide the API. Do not send classified, CUI, safety-critical, or otherwise restricted data unless a written agreement and approved deployment explicitly cover it.
How information is used
We use service data to authenticate users, enforce plan limits, provide memory operations, process billing, prevent abuse, troubleshoot availability, and respond to security reports. We do not sell personal information.
Service providers
Depending on the deployment, Cloud uses infrastructure, database, email, payment, and operator-monitoring providers. Stripe handles payment details. The service is designed to keep operational error reporting within an operator-controlled relay; see the telemetry policy for the fields and limits.
Local and self-hosted deployments
Local Vault and self-hosted federation are controlled by the operator who runs them. Their files, encryption keys, logs, backups, and retention settings are outside this hosted-service policy unless a separate support or hosting agreement says otherwise.
Requests and contact
For access, correction, deletion, or privacy questions, contact [email protected]. We may need to verify account ownership before acting. Retention details and deletion limits are described in Retention.
Security and claims
Perseus maintains a public security policy. Cloud privacy language is not a CMMC certification, ATO, cATO authorization, or government approval.