Privacy policy

In short

• This website sets no cookies, runs no analytics and sends nothing to another origin. Its fonts, scripts and images all come from semlith.com.
• The free semlith binary runs on your machine and sends nothing about your files or your questions to us.
• Semlith Cloud stores what it needs to index your repositories and answer your agents, keeps it for the periods below, and deletes it when you disconnect or leave.
• Payments are handled by Dodo Payments. We never see your card.

Who is responsible

Aakash Pawar, an individual in India, trading as semlith, is responsible for the personal data described here. Contact: support@semlith.com.

This website

semlith.com sets no cookies, runs no analytics and loads nothing from any other origin. The servers that deliver it keep standard access logs (IP address, time, page and browser) only to run and protect the site; they are not used to follow anyone.

The free binary

The semlith binary indexes the folders you point it at on your own machine. Your files, your index and your questions stay there; the binary sends none of them to us.

What Semlith Cloud stores

• Your account: your email address, name and GitHub identity from sign-in, your organisation, and your role in it. The cloud keeps you signed in with one session cookie on cloud.semlith.com.
• Indexed content: the file paths, text chunks, symbols, links between them and their vectors, from the default branch of each repository you connect. No git history, no other branches, and nothing the index's secret filters drop.
• The ledger: one row for each query your tools make: organisation, token, the tool's client name, which pieces were returned, their size and the time. Never the text of the query, unless your organisation turns that on.
• Billing status: your plan, seat count and whether the subscription is active, as Dodo Payments reports them. Not your card or bank details.
• Service logs: organisation, route, outcome, duration and the first characters of the token. Never a query's text or a file's content, and never an IP address beyond the rate limiter's short window.

How long we keep it

• The ledger: 30 days on Personal, one year on Pro and Team.
• A repository you disconnect: its content and its ledger rows are removed within the hour, and from backups at the next rotation.
• A workspace that is cancelled, or whose payment is refunded or charged back: its store is kept for 30 days, so you can come back or download it, and then deleted.
• An organisation you delete: its store and every row about it are removed.

Your store is yours: a hosted store downloads as a directory and opens in the free binary, offline.

Payments

Dodo Payments is our merchant of record. It collects and holds your payment details, billing address and tax information under its own privacy policy, and tells us only the result: which plan, how many seats, and whether the subscription is active.

Who processes data for us

• Dodo Payments: payments, tax and invoices.
• Contabo: the server Semlith Cloud and this website run on, in Mumbai, India.
• Brevo: sends account and billing mail from no-reply@semlith.com.
• Zoho Mail: holds the semlith.com mailboxes you write to.
• GitHub: when you sign in with GitHub or connect repositories, GitHub shares your identity and the repository content you grant access to.

We do not sell personal data, and we do not use your content to train any model.

Your rights

Under India's Digital Personal Data Protection Act, 2023, and, where it applies to you, the EU and UK GDPR, you can ask to see the personal data we hold about you, correct it, have it deleted, take a copy with you, or withdraw a consent you gave. Mail support@semlith.com from your account's address and we will answer within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India or to your own country's data protection authority.

Security

Stores sit on an encrypted volume and are reached only through a token scoped to one organisation. Report a vulnerability to security@semlith.com.

Changes

We publish any change on this page with a new date, and mail account holders about a change that matters to them before it takes effect.