Closed pilot privacy notice
Your data stays under your control.
Chosen North is a personal operating system. It keeps workspace data so your work can continue between sessions; this notice explains the boundaries and controls available during the closed pilot.
Last updated: 24 July 2026
Information handled
- Your account email and authentication metadata.
- Conversations, assistant replies, and content you choose to enter or upload.
- Memories, projects, planning, continuity records, and stored or extracted file content you create.
- Bounded usage, security, and failure signals needed to operate and protect the service.
Why and where it is processed
Information is used to authenticate you, provide the features you request, preserve continuity, and keep the service secure and stable.
When you request an AI, voice, file, or live-search action, the content needed for that action may be processed by the configured infrastructure and AI providers.
Durable Memory requires your action
Ordinary Chat and Voice turns do not create or reinforce durable Memory automatically during the closed pilot.
Durable Memory is written only when you explicitly ask Chosen North to remember or save something, save it yourself, or approve a reviewed item. Conversation history is stored separately.
Controls available now
Review, pin, edit, or delete durable memories from the Memory Manager.
Sign out at any time. Full account export and permanent account deletion are handled manually during the closed pilot.
Some preferences and file-library metadata can exist only in this browser. Server-side deletion cannot clear another device's browser storage; clear chosennorth.com site data on each device if you want it removed.
Manual export or deletion request
Use the same private one-to-one channel used for your pilot invitation. Identify the email linked to your account and the request type.
- 1Send a private request for either a full account export or permanent account deletion.
- 2The operator verifies control of the account before accessing or changing account-scoped data.
- 3The exact scope is confirmed. Permanent deletion requires a separate final confirmation.
- 4The operator reports completion and any browser-local or other disclosed limits before closing the request.
Account export
A manual copy of account-scoped application data and stored files is prepared in a reasonable machine-readable format and delivered through a private channel.
Permanent deletion
After final confirmation, the operator removes server-held account data and the account using the reviewed deletion procedure. This cannot be undone.
Never send a password, recovery link, access token, payment details, or unnecessary private content in a request.
Private pilot feedback
Use the same private one-to-one invitation channel. A useful report includes:
- The page or feature where it happened.
- What you expected to happen.
- What happened instead, without secrets.
- The approximate time and whether it can be repeated.