PURCEASSecurity & data
What happens to your data, in plain terms.
This page describes what Purceas actually does today. It claims no certifications we do not hold, and nothing here is a roadmap dressed as a fact. If a question is not answered below, ask — the honest answer is faster than a vague one.
Where your data lives
Purceas runs entirely on Cloudflare's developer platform: Workers for compute, D1 for the workspace database, KV for sessions and short-lived visitor transcripts, Vectorize for retrieval indexes, R2 for stored files, and Workers AI for background inference. Requests are served from Cloudflare's edge; data at rest lives in Cloudflare's infrastructure.
What is stored, and for how long
| Data | Where | Retention |
|---|---|---|
| Anonymous visitor conversation | KV | 24 hours, then deleted automatically |
| Account conversations and messages | D1 | Until you delete them or close the account |
| Project memory (the facts the AI learned) | D1 | Until you edit or delete them — visible in your workspace at all times |
| Project knowledge (documents, pages you add) | D1 + Vectorize | Until you remove the source; removing it deletes its chunks and vectors |
| Session tokens | KV, stored hashed | 30 days, or immediately on logout or password reset |
| Handoff briefs you send | D1 + email to Florentin | Kept as business correspondence |
Isolation between clients
Every database statement is scoped to the owning user or organisation in its WHERE clause — access is never granted by trusting an identifier sent from a browser. Retrieval indexes are partitioned by a per-tenant key derived from the user and the project, so a query can only ever match that tenant's own content.
Purceas does not train a model per client. That would be expensive and would not isolate anything; isolation is enforced at query and retrieval time, which is both stronger and verifiable.
Accounts and sessions
Passwords are hashed with PBKDF2-SHA256 at 100,000 iterations and a per-user salt. Session tokens are stored hashed, so reading the session store yields nothing usable. Cookies are HttpOnly, Secure and SameSite=Lax. A password reset invalidates every existing session. Sign-in by Google or by one-time email link is available; we never see a Google password.
How the AI is constrained
- Model output is rendered as text and schema-validated interface blocks only. It is never inserted as markup, so a reply cannot execute anything in your browser.
- Memory facts are injected into the prompt as data with explicit provenance, never as instructions — a stored value cannot change the system's rules.
- Prompt-injection and jailbreak resistance is covered by an automated evaluation suite that gates every release.
- Rate limits fail closed: if the limiter cannot be read, the request is refused rather than allowed.
- The AI prepares; you act. It cannot make purchases, send email on your behalf, or take actions outside the boundaries defined for your system.
Your controls
Everything the AI remembers is listed in your workspace, and every fact can be edited or deleted individually. Deleting a project removes its memory, its knowledge sources and their vectors. Conversations can be deleted permanently. Weekly emails, if you ever enable them, unsubscribe in one click without signing in.
Sub-processors
Cloudflare, Inc. — hosting, storage, edge compute and inference. Google LLC — optional sign-in with Google, and analytics on the public site only when you accept cookies. No analytics or third-party scripts run inside the authenticated workspace.
What is agreed per engagement
For AI Business Agent and Enterprise Intelligence projects, the data-processing agreement, retention windows, environment separation, incident response times and service levels are agreed in writing before the build starts, and are shaped by your requirements rather than by a template. SSO, dedicated environments and private infrastructure are part of the Enterprise tier.
What we do not claim: Purceas does not hold SOC 2 or ISO 27001 certification today, and we will not imply otherwise. If your procurement process requires a certified processor, tell us early — we will say plainly whether we are the right fit.
Reporting a vulnerability
Email purceaflorentin@gmail.com with the details. We will confirm receipt, keep you updated while we fix it, and credit you if you would like to be credited.
Purceas is operated by Ideal Genius Advance SRL · CUI 37213946 · J40/3407/2017 · Șos. Olteniței 113, Sector 4, Bucharest, Romania. See also the privacy policy and legal notice.