Privacy Policy — SelfActual

1. Introduction

SelfActual, Inc. ("SelfActual," "we," "us," or "our") is a Delaware corporation committed to a simple principle: your self-knowledge belongs to you. This Privacy Policy explains how we collect, use, and protect information when you use selfActual.ai and any associated applications, including Imprint, Atlas, and Vault (collectively, the "Services").

Please read this policy carefully. By using our Services, you agree to the practices described here. If you do not agree, please discontinue use.

2. Information We Collect

2.1 Information You Provide Directly

Waitlist and account registration: Name, email address, and any information submitted through our intake survey or onboarding forms.
Profile and assessment data: Personality assessments, reflections, working-style preferences, session logs, and other self-knowledge content you choose to create or import.
Communications: Messages you send us directly, including support requests or feedback.

2.2 Information Collected Automatically

Usage data: Pages visited on any of our websites, features accessed, session timestamps, and interaction patterns within the Services for understanding user behavior and improving our websites and services.
Device and technical data: Browser type, operating system, IP address, and similar technical identifiers collected via standard web technologies.
Cookies and similar technologies: We use cookies and local storage to maintain session state and improve functionality. You may control cookie settings through your browser.

2.3 Information from Third Parties

If you connect third-party services (such as AI platforms or assessment tools) to your vault, we may receive data from those integrations at your direction. We do not acquire third-party data independently nor do we sell information to such parties.

3. How We Use Your Information

We use the information we collect to:

Operate, maintain, and improve the Services
Provision and manage your personal vault
Communicate with you about your account, updates, and the alpha program
Respond to your inquiries and provide support
Understand how the Services are used in order to improve them
Comply with applicable legal obligations
Enforce our Terms of Service

We do not sell your personal information to third parties.

We do not use your vault contents — including session logs, profile sections, or assessment data — to train AI models or for any other purpose.

4. Your Vault: Data Ownership and Architecture

SelfActual's architecture is designed around a foundational principle: you are the owner of your vault data. We act as custodian, not owner.

Your vault is stored in a format designed to be portable and not dependent on our proprietary systems but data export is not yet available during our Alpha.
Access is governed by your vault's access controls via the MCP Connector. You determine what is shared, with whom, and for how long.
MCP bridge interactions are session-scoped. When AI agents read from your vault via our Model Context Protocol bridge, those reads are designed to serve the active session and are not retained or aggregated by us beyond what is necessary to operate the service.
If you choose to leave, you may export your vault data. We do not lock your data to our platform and we will help you to the best of our ability until we have built these features if necessary.

We work toward a fiduciary data custody model — meaning we design the system to treat your data as belonging to you, not to us. At this stage of our development, we are actively building the systems and processes to fully realize this commitment.

5. Data Sharing

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We may share information in the following limited circumstances:

Service providers: We engage third-party vendors to help operate our infrastructure (hosting, analytics, email delivery, customer support). These vendors are authorized to process your data only as necessary to perform services on our behalf.
AI platform integrations: When you use the Services with a connected AI platform (e.g., Claude, ChatGPT), your vault data is shared with that platform at your direction and subject to that platform's terms and privacy policies.
Legal compliance: We may disclose information if required by law, regulation, court order, or to protect the rights, property, or safety of SelfActual, our users, or the public.
Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email and/or a notice on our website before your information becomes subject to a different privacy policy.

6. Data Retention

We retain account information and vault data for as long as your account is active or as necessary to provide the Services. If you request deletion of your account, we will delete or anonymize your personal information within a reasonable timeframe, except where retention is required by law or legitimate business purposes (such as fraud prevention or dispute resolution).

7. Your Rights and Choices

Depending on your location, you may have rights regarding your personal information, including the right to:

Access the personal information we hold about you
Correct inaccurate or incomplete information
Request deletion of your personal information
Export your vault data in a portable format
Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at: support@selfactual.ai

We will respond to requests within a reasonable timeframe consistent with applicable law.

8. Security

We implement reasonable technical and organizational measures designed to help protect your information from unauthorized access, disclosure, alteration, or destruction. However, no method of electronic transmission or storage is completely secure. We cannot guarantee the absolute security of your information, and we encourage you to use strong, unique credentials and to take appropriate precautions on your end.

9. Children's Privacy

The Services are not directed to individuals under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

10. International Users

SelfActual is operated from the United States. If you access the Services from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using the Services, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the effective date above. Your continued use of the Services after a material change constitutes your acceptance of the revised policy. We encourage you to review this policy periodically.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

SelfActual, Inc.
131 Continental Drive, Suite 305
Newark, DE 19713

Email: support@selfactual.ai