This page explains exactly where your records live, what leaves your machine, and what never does — in plain English, so you can hand it to whoever asks you the hard questions.
Your archive is indexed and stored on hardware you own and control. There is no BePrivy cloud copy of your records — not a backup, not a cache, not a copy held for support purposes.
If you unplug the machine, your archive is unreachable — by anyone, including us. That is not a policy we could change later; it is a consequence of where the data sits.
Backups stay under the same roof. Copies are kept on hardware you control and restores are tested, so a failed drive costs you an afternoon rather than thirty years of records.
Full emails, documents, photographs, recordings, and the search index built from them all stay local. Many questions are answered entirely on the device, with nothing at all leaving the building.
Deletion means deletion. Remove something from Privy and it is gone from what Privy can read and answer with — it does not linger in a cache and resurface in an answer weeks later.
Some questions can optionally use a cloud AI model for the final written answer. Before anything is sent, sensitive details are automatically protected in two tiers.
Fictional example, for illustration.
The mapping between a placeholder and the real thing it stands for never leaves your machine. You stay in control of what leaves.
Every answer links the exact source documents it drew from — the real email, the real contract, the real photograph, with its date and where it came from. You can open them and check.
That is the difference between a system you believe and a system you can check. We would rather be checked.
Privy is in development. We are not claiming certifications we do not hold, and there is nothing on this page we would not repeat to your accountant.
Nothing leaves the building.
Request early access