Privacy
Privacy Policy
Last updated: 25 July 2026 · Applies to Archessa v0.1.0 and archessa.com
The short version
Archessa has no accounts, no telemetry and no servers. Your conversations are read, organized and stored entirely on your own computer.
This isn't a promise about our intentions. There is no Archessa server for your data to go to, so there is nothing to trust us about. The two places the app does touch the internet are listed below in full.
Who is behind Archessa
Archessa is built and run by an independent solo developer, operating as a sole trader and based in Taiwan. For data-protection purposes that person is the data controller. The app collects no personal data at all; the website holds one thing, and only if you hand it over — your email address, if you join the waitlist. Both are set out below.
Contact: vinvincode@gmail.com
What Archessa stores, and where
When you drop in an export from ChatGPT or Claude, Archessa reads it and builds an index on your own disk. On Windows:
- Your archive database: %APPDATA%\Archessa\lattice.sqlite
- Local AI models: %APPDATA%\Archessa\models
That's it. Nothing is copied off your machine, because there is nowhere for it to be copied to. If you delete that folder, the archive is gone — permanently, and without anyone needing to action a request.
What we collect
From the app: nothing. Specifically, Archessa contains:
- No account, sign-up, licence key or email requirement. You can use Archessa without telling us you exist.
- No analytics or product telemetry. There is no PostHog, Google Analytics, Mixpanel, Amplitude or equivalent in the app.
- No crash or error reporting. There is no Sentry or equivalent.
- No automatic update checks. The app does not contact any server to ask whether a newer version exists.
- No advertising, no third-party trackers, and no sale or sharing of personal information — now or ever.
From the website: your email address, only if you type it into the waitlist form. Nothing on this site collects an email any other way, and you can read the whole page without giving one.
The AI runs on your computer
The organizing, tagging and summarizing that Archessa does is performed by a language model running locally on your own machine, through Ollama on localhost:11434.
Your conversations are never sent to OpenAI, Anthropic, or to us, for any purpose — including model training. If a local model isn't available, those features simply don't run. Archessa never silently falls back to a cloud service.
Where Archessa does touch the internet
Archessa is local-first, but it is not hermetically sealed, and we would rather tell you than have you discover it in a network log. There are exactly two outbound connections today, and neither one carries any part of your archive:
1. Saving a link, when you paste one into Grain
Grain's Add a link box asks Archessa to fetch a web page for you. When you use it, the app requests the address you pasted, and that website sees your IP address — exactly as it would if you had opened the page in your browser yourself.
This happens only when you paste a link and press Save. It never runs on its own, it never follows links found inside the page, and it sends nothing about you or your archive — just an ordinary request for that one page. Archessa refuses addresses on your own machine or your local network, so it cannot be pointed at your router or at anything else running on your computer.
The browser extension does not make this connection: it reads the page already open in your browser and hands it to Archessa on your own machine.
2. Prototype rendering, when a React prototype is displayed
If your archive contains React prototypes, Archessa renders them live. To do that it loads React, ReactDOM, Babel, Tailwind and Lucide from unpkg.com and cdn.tailwindcss.com. Those CDNs receive your IP address and can see which library files were requested.
Note that this includes thumbnails, not just prototypes you deliberately open — so scrolling a list that contains React prototypes can trigger it. Your prototype's own code is compiled and rendered on your machine; it is never uploaded.
What this means in practice: the first connection happens only when you ask for it, and only to the page you named. The second reveals that a computer at your IP address is running Archessa. Neither reveals anything about what is in your archive. We consider the prototype CDNs a wart on a local-first product and intend to bundle those assets into the app; when that ships, this section will shrink and this page will say so.
The app's typefaces used to be loaded from Google Fonts, and are not any more — they are bundled into the app, so opening Archessa now makes no outbound request at all. This page said otherwise for longer than it should have.
The website
archessa.com is a static page hosted by Vercel.
- No cookies, and nothing stored on your device. No consent banner, because there is nothing to consent to.
- Fonts are self-hosted, so loading this page does not tell Google you visited.
- This page counts visits, and counts waitlist signups. We use Vercel Web Analytics for it. It is cookieless and it does not follow you: it sets no identifier, reads nothing from your browser's storage, and cannot recognise you on any other website or on a later visit. The request goes to archessa.com itself, so no advertising or analytics company is involved. What we can see is aggregate — how many people came, roughly where from, and how many joined. That count is not joined to your email address. What we cannot see is who you are.
- There is no session recording, no heatmap, no mouse tracking, and no third-party tracker of any kind. See the Vercel Web Analytics privacy policy.
- Vercel, as our hosting provider, keeps standard server logs (IP address, user agent, timestamp) to deliver the site and protect it from abuse. See the Vercel privacy policy.
None of this is in the app. The website is a website; the app is where your conversations live, and the app measures nothing at all. The two are separate, and the section above about the app is the one that governs your data.
The waitlist
Archessa is not publicly downloadable yet. The only way to be told when it opens is the waitlist form, and joining is entirely optional.
- What we store: your email address, whether your browser looks like Windows or a Mac (so the launch email goes to the right people first — the Windows build ships first), the site you arrived from, and the date you signed up. Nothing else. We do not ask for your name and we do not try to work it out.
- Where it is stored: in a database hosted by Supabase in Tokyo, reachable only by a server-side key that is never sent to your browser. It is a separate system from your archive, which never leaves your own computer.
- What we do with it: email you when Archessa opens. That is the entire purpose. It is not a newsletter, it is not sold, it is not shared, and it is not used to build a profile of you.
- Getting off the list: reply to any email we send, or write to vinvincode@gmail.com, and the row is deleted. No account or login is needed to ask.
- How long we keep it: until you ask us to delete it, or until 12 months after launch — whichever comes first.
Your rights
Data-protection law gives you rights to access, correct, export and delete the personal data a company holds about you. The app holds none of your personal data, so there is nothing to request there. If you joined the waitlist, we hold your email address and you can exercise every one of those rights over it by writing to vinvincode@gmail.com — we will action it by hand, at no cost.
Your archive is yours, on your disk, in an open SQLite database you can read with any SQLite tool. To remove it entirely: uninstall Archessa and delete %APPDATA%\Archessa.
- If you are in the EU or UK (GDPR): the app processes no personal data. For the waitlist, the lawful basis is your consent, given by submitting the form, and you may withdraw it at any time by asking us to delete your address. Supabase hosts that data in Japan; the transfer relies on Supabase's Standard Contractual Clauses. The website's visit and signup counts are aggregate and cookieless, set no identifier, and are not used to single anyone out.
- If you are in California (CCPA/CPRA): the only personal information we collect is a waitlist email address you chose to give us. We do not sell or share personal information, and we never have.
Children
Archessa is not directed at children under 13, and we do not knowingly accept waitlist signups from them. The app itself collects no data from anyone of any age.
Changes to this policy
If any of this changes, we will update this page and the date at the top.
In particular: if we ever add crash reporting or usage analytics to the app, it will be opt-in, off by default, described here before it ships, and it will never include the contents of your conversations. If you would rather not take our word for it, the absence of network activity is something you can verify yourself with any firewall or packet inspector.
Contact
Questions about privacy, or something on this page that doesn't match what you observe? Email vinvincode@gmail.com — corrections are genuinely welcome.