Privacy
Held in Common™ ("Commons" for short) is made by Through the Looking Glass LLC, a Hawaiʻi company. This is what Commons keeps, where it lives, and who can see it.
What Commons keeps
- Your email, so you can sign in with a code we email you. There's no password to store.
- The name you go by. It signs everything you do in Commons.
- What you and your AIs share into your space: briefs, decisions, notes, asks, replies, who has which role, and links to your documents. Nothing becomes shared memory until someone in the space says yes. Drafts your AI saves for you stay visible only to you until you share them.
- Which AI apps you've connected (Claude, ChatGPT, Grok), and the day you first used each one.
- Basic server records: when each request came in, the address it came from, and the kind of browser. These keep the service running and safe, and our hosting provider keeps them only briefly.
What Commons doesn't keep
- Your conversations with your AI. Commons only receives what your AI sends when it uses Commons, for example to catch you up or to propose something to share.
- Your files. Commons keeps links to your documents, never their contents.
- Your passwords for any other service.
No ads. We never sell or rent your information.
Where it lives
- Your space's memory is kept in a private repository on GitHub (GitHub, Inc.), one repository per space.
- Sign-in and the member list are kept by Supabase.
- The Commons server runs on Render, in the United States.
- The emails Commons sends, such as sign-in codes and "something needs you", go out through Resend.
These companies store or process your information only so that Commons works.
Who can see it
- The people in your space see everything shared in it. Nobody outside it can.
- Your AI provider. When you connect an AI, that provider receives what Commons sends back to it, and the provider's own privacy policy covers that.
- Us, rarely, and we tell you. As the operator, we can technically read the spaces we store. We look inside a space only for three reasons: to fix a problem someone in it reported, to keep Commons safe and running, or because the law requires it. When we do, a note appears in that space saying who looked, when, and why, unless the law forbids it.
Taking it with you, or deleting it
You can do all of this yourself, any time, from your Commons page under Who's in:
- Download a copy of your space. Every file comes as plain text.
- Leave a space. What you shared stays with the others, signed with your name, as part of their shared record. You can ask us to remove your name from it.
- Delete a space you started, once you're the last person in it. It's gone from Commons and from GitHub.
When you leave or delete your last space, your sign-in is closed too. Short-lived copies kept by our providers clear within 30 days.
Children
Commons is for people 18 and older.
Changes
If this page changes in a way that matters, we'll say so in Commons before the change takes effect.
Contact
hello@heldincommon.app · Through the Looking Glass LLC, Hawaiʻi