Privacy policy

Your browser keeps a copy of your account’s canvases in its local storage (IndexedDB), one copy per account, so they open quickly and edits are kept while you are offline until they reach our server. Clearing this site’s data removes that copy, not the canvases in your account — except edits that had not reached the server yet.

Canvases made before they were saved to accounts were moved to the first account that signed in on this browser, up to that plan’s number of canvases. Any that did not fit stay only in this browser, where they are not backed up by us; the app offers them as a download.

Your light/dark theme choice and the Mock mode, Suggest follow-ups and Tab completion settings are also stored in this browser.

Accounts are provided by Supabase. For each account we store:

• your email address and sign-in credentials (passwords are hashed by Supabase Auth; if you sign in with Google, Apple or GitHub, the identity that provider shares, such as your name and email);
• an optional display name you set in Settings;
• API keys you add for Anthropic, OpenAI, Google or xAI, encrypted at rest with AES-256-GCM. Only the last four characters are ever shown back to you, and a key is decrypted only on our server, for the request it is used for;
• how many Auto tokens you used each day, to enforce the daily budget. This is a count, not the content of the requests;
• your canvases — chats including the model replies in them (and, where a reply searched the web, its search queries, the addresses and titles of the pages it found, read or cited, and a short excerpt from the start of each page it read), notes, summaries, injectors, connections and their layout — so they are available in any browser you sign in on. They are tied to your account, and we use them only to show them back to you.
• files you attach to chat messages, where attaching is offered — images, PDFs and text or code files — with their name, type and size, in private storage tied to your account. They are shown only to you, through links that expire within ten minutes, and sent to a model only as part of your requests (below).
• product usage events: which features you used and when — for example that you created a canvas or sent a message to Auto — with your account id, and whether you used the website or Asterism Desktop (with the desktop app's version). They never contain the text of your messages, notes or canvases, or the names or paths of your files. We keep them for 13 months and delete them with your account.

When you send a message, summarise, merge, compact a conversation, or run an injector, Asterism AI sends that request through our server to the model it uses:

• Auto requests go to MiniMax, using Asterism AI’s own MiniMax account.
• Claude, GPT, Gemini and Grok requests go to Anthropic, OpenAI, Google or xAI using the API key you added, under your own agreement with that provider.

A request contains your message and the context the canvas resolves for it: the conversation it continues, and the notes, chats and summaries you connected or pinned. Nothing else on the canvas is sent. Each provider processes requests under its own terms and privacy policy. Mock mode sends nothing to any provider.

Files attached to a message are sent with each request of the chat they were attached in (the most recent ones, when a chat holds many), to that chat’s model: images and PDFs as a link to the file that expires within ten minutes, which the provider fetches, and text files as text. A model that cannot read a kind of file — Auto reads only text files — and chats that continue from or are connected to that chat, its branches included, receive only the file’s name, never its contents. A duplicate of the chat, or a branch no longer connected to it, holds its own copy of the message and sends the file to its own model, and a message you edit and resend into a new branch takes its files with it, to that branch’s model.

Web search is off unless you turn it on for a chat. When it is on, a Claude or GPT reply can search the web and read web pages, and the provider does that itself, on the API key you added: the search queries the model writes from your conversation, and the addresses of the pages it reads, are part of the request to Anthropic or OpenAI, which run the searches and fetch the pages under their own terms. Our server never contacts those sites. Auto never searches the web.

If you turn on Suggest follow-ups in Settings (it is off by default), then after a reply your last message, that reply (shortened when long) and the chat’s title are also sent to MiniMax as an Auto request, to suggest what you might ask next — also in a chat that uses Claude or GPT. It counts toward your daily Auto usage.

If you turn on Tab completion in Asterism Desktop (Settings → Models; it is off by default), then each time you pause while typing in the editor, the code around the cursor (about 1.5k tokens), the file’s name and path in the open folder and its language are sent through our server to OpenAI or Anthropic, using the API key you added, to suggest the text that follows. Without that key nothing is sent. It never uses Auto, and our server does not log the code.

Our server does not log the text of your messages or of model replies, and error reports sent to Sentry leave out request contents (see Service providers). Like any website, our hosting provider records request metadata such as IP address, time and URL.

Dictation uses your browser’s own speech recognition. Your browser may send the audio to its vendor’s speech service to be transcribed (Chrome, for example, uses Google’s servers for this), under that vendor’s terms and privacy policy. Asterism AI does not receive or store your audio: only the transcribed text appears in the message field, and it is sent only when you send the message. While you dictate, the app measures your microphone’s loudness in your browser to draw the level indicator; nothing of it is recorded or sent.

Read aloud uses your browser’s speech synthesis. Depending on the voice your browser or operating system uses, the reply being read may be sent to that vendor’s speech service to be spoken; no audio comes to Asterism AI.

Asterism AI uses cookies to keep you signed in and to remember your theme. There are no advertising or analytics cookies, and no third-party trackers.

• Supabase — accounts, authentication and the database above, including your canvases, and the storage for your attached files;
• Vercel — hosting;
• MiniMax — the Auto model;
• Paddle — only if you buy a paid plan. Paddle.com is the merchant of record for our orders. We send it your email address and account id to set up your purchase; it collects your payment details and billing address itself, under its own privacy notice, and we never see your card. We keep your Paddle customer id and your subscription’s status and paid-through date;
• Sentry — error reports. A report contains the error, the page and browser it happened in, and your account id; in Asterism Desktop, also the app's version, with folder paths on your computer shortened to ~. Request contents, cookies and API keys are removed before it is sent, and the error message is cut to 300 characters; an error passed on from an AI provider can still quote a short part of the request that caused it;
• Anthropic, OpenAI, Google and xAI — only when you add your own key and choose their models.

We do not sell your data or use it for advertising.

• Remove a stored API key at any time in Settings.
• Delete a canvas in the app to remove it from your account and from this browser. Download all canvases, on the gallery or in Settings → Canvases, saves all of them as one file.
• Remove a file from a message before you send it, and it is deleted at once. Files already sent stay with your account — deleting the message’s chat or canvas does not delete them — until you delete your account.
• Delete your account in Settings, under Account. It permanently removes the account and all the server-side data listed above at once, canvases included, along with your attached files; download any canvases you want to keep first. A paid subscription is cancelled at once; Paddle keeps its own records of past orders, as tax law requires. The copy in this browser can then be removed by clearing this site’s data.

Asterism AI is not intended for children under 13, and we do not knowingly create accounts for them.

When this policy changes we update this page and its date. See also the terms of use.

A contact address will be published on this page before general availability. Everything this policy lets you do — removing keys, deleting canvases, deleting your account — works from the app itself.