Retia holds your thinking to give it back to you — not to mine it, sell it, or train on it. Here's plainly what we do and don't do with your data.
Your knowledge is yours. We just keep the lights on.
Under KVKK and GDPR, there's a meaningful distinction between a data controller (who decides why data is collected) and a data processor (who handles it on the controller's instructions). Retia is built as a processor. You decide what goes into your vault and why; we process and safeguard it on your behalf. We don't repurpose your data for our own ends.
As little as we can while still running the service:
Sensitive notes are encrypted, and your most private work can use Standard Mode — zero-knowledge encryption that happens in your own browser, where the key never reaches our servers. For that content, we hold nothing but ciphertext. You can also self-host Retia entirely on your own infrastructure, in which case your data never touches us at all.
Under KVKK and GDPR, you have the right to access, correct, export, and delete your data. Retia is built to honor these by default — your knowledge is portable, and you can export or remove it whenever you choose. To exercise any of these rights, reach us at [email protected].
We rely on a small set of trusted infrastructure providers — for hosting, database, and payments — to run the service. They process data only as needed to provide their part of the service, under their own compliance commitments. We don't share your data beyond what's necessary to operate Retia.
If this policy changes in a way that affects you, we'll let you know — clearly, not buried in fine print. The current version always lives here, with its date at the top.
Questions about privacy, your data, or how any of this works? Write to [email protected] — a person reads it.