Privacy
Last updated 24 October 2026.
The short version
- Docspace has no accounts and needs no personal data. Please keep it out of your questions and uploads.
- Your chat, answers and uploads stay in your session's private machine and are deleted when the session ends, at the latest after 45 minutes. Your own browser keeps your recent questions until you clear them (see Cookies and browser storage).
- To write the answers, your questions and the passages the assistant reads, from the sources and from your uploads, are sent to the company that runs the model you use. The default model, Apodex 1.1 Mini, is run by Novita AI (United States), which says it keeps nothing and does not train on what it receives. No UK or EU transfer safeguard covers this, so Docspace sends nothing there until you agree: the first time you send a question in a session, the chat asks, and your question goes once you click "I agree".
- You can also choose Mercury 3, whose provider may keep what it receives; our hosting provider says it does not train on what it receives through its AI gateway. It is never chosen for you, and it is used only after you click "I agree" in the chat; it may keep passages from your uploads too. See Models.
- Docspace uses only the cookies it needs to work. No analytics, no advertising, no tracking.
Who is responsible
EggCity (eggcity.vercel.app) runs Docspace and decides how the data described here is used. Contact: hi@eggcity.io.
What Docspace handles, why, and for how long
| What | Why | How long |
|---|---|---|
| Your questions, the assistant's answers and the rest of the chat | To answer your questions: the service you asked for | Until the session ends |
| Your uploads, and the text Docspace extracts from them | So the assistant can read and cite them: the service you asked for | Until the session ends |
| A cookie on the start page and a sign-in cookie in the chat. They hold a signed reference to your session, not personal details | To connect your browser to your own session and keep everyone else out | Until the session ends |
| The access password, when the start page asks for one | To check that you may start a session | Not kept: it is checked and discarded |
| Your agreement to send data to a model's provider: the time, a random session code, the model, the version and a fingerprint (hash) of the sentence you agreed to. No name, no question, no content | To be able to show that you agreed before anything was sent, as UK data protection law requires | Up to 24 months, then deleted |
| A daily code for the network you connect from (a salted fingerprint of your IP address, which changes every day; not the address itself), with your session's random code, its start and end times, and how it ended | To keep Docspace fair and its costs bounded (at most two sessions at once and a daily time limit per network, and a daily limit for everyone): our legitimate interest in offering a free service to many people | Up to 8 days, then deleted |
| Technical records: our own event lines (event names, random session codes, model names, timings, token counts, status codes and error messages, never your questions, answers or uploads), and our hosting provider's records of requests to Docspace | To keep Docspace working and secure, and to fix faults: our legitimate interest in running a reliable service | As long as our hosting provider keeps its logs |
"Until the session ends" means until you press End session, or until its 45 minutes run out, whichever comes first. Then the session's private machine and everything on it are deleted. We cannot recover them.
Who else receives it
- Our hosting provider runs the start page and your session's private machine, and stores the records of your agreements and the daily network codes. Through its AI gateway it also passes requests for Mercury 3 to Inception only; see Models.
- The company that runs the model you use receives what the assistant sends to the model at each step: your questions, the chat so far, the names of your uploads, and the passages it reads or finds when it searches the sources and your uploads. Your upload files themselves are not sent. Chat titles and memory summaries are written by the default model. Which company that is, and what it keeps, depends on the model: see Models. What these companies say about keeping data is their own statement, which we cannot check, and ending your session does not delete anything they keep.
- An AI model routing provider (a US company) passes requests to the models as follows: for Apodex 1.1 Mini only when Novita AI cannot be used directly and the routing provider offers that model free. It handles this data for EggCity under a data processing agreement. Each request names the company that must run it (Novita AI for Apodex 1.1 Mini) and may go to no other.
- We don't sell your data or share it with anyone else, unless the law requires us to.
Models
The model menu in the chat lists the models. Each one's name says whether its provider keeps what it receives.
| Model | Who runs it, and where | What it keeps | Transfer safeguard | When it is used |
|---|---|---|---|---|
| Apodex 1.1 Mini (default) | Novita AI, United States. Our server sends each request to Novita AI directly; only if that is not possible and the routing provider offers the model free, through the routing provider, still to Novita AI only | Novita’s terms say it keeps nothing and does not train on what it receives | None. | Only after you click "I agree" in the chat, for that session. It also writes the chat titles and memory summaries of every chat, so Docspace cannot answer without this agreement, and a chat with Mercury 3 asks for that model's agreement and this one at once |
| Mercury 3 (your choice) | Inception AI, Inc., United States. Requests reach it through our hosting provider’s AI gateway, which may send them to Inception only. Inception handles them under its own terms and privacy policy | Inception’s privacy policy says it may keep what it receives for as long as necessary to provide its services or for its business purposes, which include training its models. Our hosting provider says Inception does not train on what it receives through its AI gateway, and does not offer zero data retention there. Ending your session does not delete what it keeps | None. | Only if you choose it and click "I agree" in the chat, for that session |
Your agreement. For a model without a transfer safeguard, Docspace relies on your explicit agreement to the transfer, given once per session for that model, in the chat: when you send a message to it, a notice above the chat box shows what you agree to, and the message goes once you click "I agree". Without it, nothing is sent to that model. You can refuse: then nothing is sent, and you can end the session; but Docspace cannot answer without the default model's agreement, because that model writes the titles and memory summaries of every chat. The risks: data protection law in the provider's country may protect you less than UK law, we cannot make the provider follow UK rules, and you may find it harder to exercise your rights or get a remedy there. You can withdraw your agreement at any time by ending the session. Choosing another model stops sending to the one you leave (Mercury 3), but not to Novita AI: Apodex 1.1 Mini keeps writing the titles and memory summaries until the session ends. Withdrawing does not undo what was sent before, and does not delete what a provider keeps.
Where it is processed
Docspace's server functions run in the United States, and our hosting provider and the AI model routing provider are US companies. For data from the UK: our hosting provider is certified under the UK Extension to the EU–US Data Privacy Framework, which UK law approves for transfers, and the routing provider handles data for us under a data processing agreement that includes the UK International Data Transfer Addendum to the EU standard contractual clauses. You can ask for a copy at hi@eggcity.io. Novita AI (United States) and Inception (United States) have no such safeguard: see Models.
Cookies and browser storage
Docspace sets cookies only so that it works: on the start page, one that identifies the session your browser started; in the chat, one that signs you in and one that remembers your language. The two session cookies expire when the session ends.
The chat also keeps some things in your browser's own storage: display settings such as theme and model choice, chat titles, and your recent questions, including unsent drafts, so you can recall them. Ending the session does not clear these from your browser. To remove them, clear the site data for the chat's address in your browser settings, or use a private window.
None of this is used for analytics or advertising, so Docspace does not ask for cookie consent.
What Docspace doesn't do
- No accounts, names or email addresses.
- No analytics, advertising or tracking.
- No decisions about you: the answers are research for you to check and use as you decide.
- EggCity doesn't use your chats or uploads to train AI models. If you choose Mercury 3, its provider may keep what it receives; our hosting provider says it does not train on what it receives through its AI gateway (see Models).
Please keep personal data out
You don't have to give any personal data to use Docspace, and it doesn't need any: it works on public regulatory sources. Keep personal data out of your questions and uploads: no names, contact details or anything else about you, your clients or other people. While Docspace is a preview, don't upload confidential client files. Never upload health, genetic or biometric data; data about racial or ethnic origin, political opinions, religious beliefs, trade union membership, sex life or sexual orientation; criminal records; payment card details; or passwords and other credentials.
Your rights
Under UK data protection law you can ask for a copy of your personal data, and ask for it to be corrected, deleted or restricted, or to receive it in a reusable format. You can withdraw an agreement to send data to a model's provider at any time (see Models). Docspace has no accounts and deletes each session within 45 minutes, so once a session has ended we normally hold nothing we can link to you: the record of your agreement holds only a random session code, and the daily network code can be matched to you only if you tell us your IP address and the day. To delete your chats and uploads straight away, press End session.
Your right to object. Where we rely on our legitimate interests (the daily network code and the technical records above), you can object at any time at hi@eggcity.io. We will then stop, unless we have compelling grounds to continue, such as keeping the limits fair for everyone or keeping Docspace secure.
You can raise a concern with EggCity at hi@eggcity.io, and you can complain to the Information Commissioner's Office at ico.org.uk.
Who Docspace is for
Docspace is a research tool for professionals working with UK crypto regulation. It is designed for, and offered to, users in the United Kingdom. It is not meant for children.
Changes
We may update this page. The date at the top shows the current version. The rules for using Docspace are in the Terms of use.