Privacy policy · beta
Datum's whole job is refusing claims that overstate what was checked. It cannot make one about itself, so this page says what actually happens, including the parts that are not flattering.
Four things, and every one of them is something you confirmed on purpose.
Plus a receipt for every check it runs, and a small counter per record of how often a check reached for it.
On one machine in Fargo, North Dakota, reached over an encrypted tunnel. It is backed up daily, to the same premises, not offsite. That is a beta posture, and it is written here rather than discovered later.
Sign in is handled by WorkOS. They hold your credential. Datum never sees your password.
You. That is the default and it stays the default.
You can give one other person reach into one space, using a code you send them. They see that space and nothing else, not even the names of your other spaces. You revoke it and the revocation takes effect immediately, because the authority lives in your account rather than theirs.
A person you share with can read the facts in that space, or also confirm facts in it. Neither can delete anything. Deletion stays with you.
Export hands you everything stored: your facts, your rules, and your receipts. It is read only and there is nothing to confirm.
Forget deletes your account and everything in it. Run it with no arguments first and it deletes nothing, it tells you what is stored so you can read it back before you decide.
Neither requires asking anyone, including me.
On the free plan, the content of what you confirm may be read by a person at Riley AI Systems to make the product better.
It is not sold, and it does not train anybody else’s model. On a paid plan it is never read to improve the product. If the free plan’s terms are not acceptable for your work, do not put that work in here on the free plan.
| Free | Paid | |
|---|---|---|
| Your facts, rules and sources | yours | yours |
| Your drafts | never stored | never stored |
| Content used to improve Datum | yes | never |
| Offsite encrypted backup | no | planned, not yet |
A paid account is not a different security model wearing a badge. It is the same software on the same machine. What it buys is a commitment in writing that your content is never used to improve the product.
Payments go through Stripe. Stripe holds your card details; Riley AI Systems sees your name, email, billing address and what you paid, and never your card number.
One machine, so when it is down it is down. Data loss is possible while the backup is still on the same premises. If something breaks, email me and the person who built it will answer.
Every receipt is signed with a key Datum publishes, so anyone holding one can check it themselves without an account and without trusting the sender.
It proves the check ran, which claims were measured, what they were measured against, and the result.
It does not prove that the records checked against were true, that they came from where the sender said, or that everything in the document was checked. A receipt names what it measured and what it did not, and the second part is the part worth reading.
The other half of this is the terms of service, which covers what Datum promises and what it does not.
Datum is operated by Riley AI Systems, Fargo, North Dakota. Questions to conner@rileyaisystems.com. Last updated 14 October 2026.