Privacy policy

1The short version

Nothing is sold

Your documents, your questions and your email address are never sold, rented or handed to data brokers, advertisers or ad networks.

No tracking

The site uses no tracking cookies, no pixels, no Google Analytics and no behavioural analytics of any kind. There is no advertising profile of you anywhere.

Your documents are yours

They stay in your private library. They become visible to someone else only if you explicitly share a notebook with them.

The extension does not read your document

The Google Docs extension only writes, at the cursor. It cannot read the document text — the section on the extension explains why.

2What your account stores

Only what the service needs to work. Nothing is collected "just in case".

Your email address

It is the account identity. If you signed in with Google, Google gives us the email address and the confirmation that it is yours — nothing beyond that, and no access to your Gmail, Drive or calendar.

Password

Stored only as a hash. Nobody at Archeia.ai can read your password or recover it — only reset it.

The documents you upload

The original file, the text extracted from it, that text split into passages, and the numeric representations (embeddings) that make search possible. Plus the bibliographic data: title, author, year, publisher.

Your questions and answers

The conversation history, with the passages cited in each answer, so you can go back to them.

Your notebooks

Name, attached documents, the message thread and — if you shared the notebook — who the members are and each one’s role.

Plan and usage

Which plan you are on, how many questions you have used this month, and the subscription state. Payment is processed by Mercado Pago: Archeia.ai receives only the status ("paid", "cancelled") and never sees your card number.

3What stays in your browser

Archeia.ai does not use cookies. What exists is browser local storage, and it is never sent to third parties:

Session token

Kept in sessionStorage, not localStorage: it disappears when you close the tab. It is what keeps you signed in while you browse.

Preferences

Your chosen language and citation style (ABNT, APA, Chicago, Vancouver) live in localStorage, so you are not asked again on every visit.

Google fonts and sign-in

Pages load typography from Google Fonts and, on the login screen, the "Sign in with Google" script. In both cases Google receives your IP address, as it does on any site using those services.

4The Google Docs extension

The extension opens a side panel next to the document. What it stores stays in your browser only, in chrome.storage.local, and never leaves it: the OAuth client identifier it registers on first connection, the access token, the refresh token, the token expiry, and the interface language. Nothing else.

What it sends

What you type into search, the questions you write, and notebook actions — all to https://archeia.ai/api, and to no other address. There is no telemetry, no usage analytics, no ad network and no third-party server in the extension.

What it writes

The formatted citation, inserted at the cursor, when you click to insert it. If insertion fails, the citation is copied to the clipboard and the side panel tells you to paste.

On install, Chrome warns that the extension can "read and change your data on docs.google.com". That is the standard permission wording, and the "read" half is worth being exact about: the extension does not read your document. Google Docs paints the page to a canvas, and the extension’s script does exactly one thing — it focuses the hidden text-input field Docs listens to and inserts the text there, as if you had typed it. It has no code to read the content, and no way to.

5AI assistants (MCP)

If you connect Archeia.ai to Claude, ChatGPT or another MCP-compatible assistant, that assistant can search your library and ask questions on your behalf, within what your authorization allowed. The questions and the passages returned are then also covered by that assistant’s privacy policy, which belongs to another company. You can revoke access at any time on the Connect page, and revocation takes effect immediately.

6Who the data is shared with

Archeia.ai is run by one person and built on third-party services. These are all of them, and what each one receives:

Amazon Web Services

Hosts the application, the database and the original files of your documents (S3), and sends the transactional email. Servers in the United States.

Anthropic

Generates the answers. Receives your question and the passages from your documents that were selected to answer it — not your whole library, and not your email address.

Voyage AI

Generates the embeddings. Receives your documents’ text, in passages, at processing time, and the text of your searches.

Mercado Pago

Processes payments. Receives billing details directly from you; Archeia.ai gets back only the subscription status.

Bibliographic catalogues

Google Books, Open Library and Crossref are queried to fill in title, author and year. They receive only those identifying details — never the document content.

Outside this list nothing is shared — except where the law requires it, under a valid court order. Nothing is sold, under any circumstances.

7Retention and deletion

Data stays for as long as the account exists. You control most of it directly:

Delete a document

From the library. It removes the record, the original file in S3, the extracted text and the embeddings, in one go.

Delete a notebook, or clear its thread

From the notebook page. Deleting a notebook does not delete the attached documents, which stay in your library.

Revoke the extension or an AI assistant

The authorization stops working immediately. The tokens held in the browser are discarded, but your documents and history remain in your account.

Delete the whole account

Not self-service yet: write to suporte@archeia.ai from the account’s email address. Deletion is done within 30 days and takes documents, files, conversations and notebooks with it. Backups are overwritten within a further 30 days.

8Your rights

Under Brazil’s LGPD, and regardless of it, you may:

Know what exists about you

Ask for confirmation and a breakdown of what your account stores.

Correct it

Bibliographic and account details are editable by you, at any time.

Take it with you

Ask for a copy of your data in a machine-readable format.

Delete it, and withdraw consent

As described in the previous section. Withdrawing consent means closing the account, because the service does not work without the data it stores.

9Security, changes and contact

All traffic is over HTTPS. Passwords are stored as hashes, access tokens expire, and files in S3 are not public — access is by signed, temporary URL. No system is immune, and we do not claim otherwise: what we do promise is to tell you if something happens to your data.

Minors

The service is not intended for people under 18 and does not knowingly collect their data.

Changes to this policy

The date at the top changes with it. Material changes are announced by email, to the account address.

Getting in touch

Questions, deletion requests or data copies: suporte@archeia.ai. We reply within five business days.