GravitasGPT Privacy Policy
Effective Date: September 2026 • Last Updated: September 9, 2026. Digital Gravitas LLC ("GravitasGPT", "we", "us", or "our") operates under a foundational covenant: executive deliberations demand uncompromised institutional confidentiality.
1. Overview & Sovereign Commitment
GravitasGPT is purpose-built for senior leadership, board directors, and executives confronting sensitive situational dilemmas. Unlike consumer generative artificial intelligence applications, our platform operates on an enterprise-first data topology where the confidentiality of your executive reflections, organizational friction points, and board preparations is paramount.
This Privacy Policy delineates the categories of data processed, the cryptographic and architectural barriers safeguarding your account, and our strict prohibitions regarding third-party model training.
2. Strict Prohibition on Model Training
We maintain an unconditional covenant: We do not use, and will never use, your client queries, executive prompts, uploaded files, situational details, or synthesized counsel to train, fine-tune, or reinforce any artificial intelligence or machine learning models (neither proprietary models nor third-party foundational models).
All inferences performed via foundational multi-model routing utilize commercial zero-data-retention enterprise API endpoints where inputs are processed ephemerally solely to formulate the real-time advisory response.
3. Information We Collect
A. Executive Account Profile
When registering an account, we collect your name, corporate email address, executive leadership title, and authentication credentials. If you authenticate via Google OAuth, we receive tokenized authentication confirmations without access to your external emails or files.
B. Executive Calibration Baselines
Upon onboarding, you may complete the 4-dimensional executive calibration survey (Confidence, Composure, Communication, Vision). These qualitative metrics are mapped exclusively to your profile to calibrate advice tone.
C. Advisory Deliberations & Longitudinal Memory
Transcripts of situational queries, BLUF directives, and cognitive pattern notes you explicitly choose to store in your longitudinal memory.
4. How We Process Information
We process executive information exclusively for the following operational reasons:
- Formulating synthesized executive situational counsel using the 8-Pillar GRAVITAS doctrine.
- Maintaining your continuous longitudinal memory context across distinct advisory sessions.
- Administering authentication, billing quotas, and security monitoring.
- Preventing unauthorized systemic intrusions and brute-force authentication attacks.
5. Security & Isolation Architecture
GravitasGPT employs defense-in-depth engineering principles:
Enforced directly at the database engine tier. Each executive’s interactions and memory vectors are strictly locked to their unique verified UUID.
All data at rest is encrypted using AES-256 GCM. All data in transit is transmitted over TLS 1.3 with forward secrecy.
6. Data Retention & Hard Purging
Unlike platforms that retain conversations indefinitely by default, GravitasGPT gives executives direct control over data life cycles:
- Configurable Retention Windows: Set automated retention policies (7 days, 30 days, 90 days, or unlimited for Pro/Executive users).
- Instant On-Demand Hard Purge: Deleting a conversation or requesting memory clearing executes an immediate, irreversible cryptographic deletion across primary databases and vector index caches.
7. Subprocessors & Disclosures
We do not sell, rent, or monetize executive data under any circumstances. We share data only with audited infrastructure subprocessors necessary to operate the platform:
- Supabase / AWS: Database, authentication, and secure vector storage infrastructure (US East / West).
- Stripe: PCI-DSS Level 1 payment processing (we never store complete credit card details).
- Enterprise Model Providers: Zero-retention enterprise inference endpoints governed by commercial DPAs.
8. Global Privacy Rights (GDPR / CCPA)
Regardless of geography, all GravitasGPT clients are afforded executive rights:
- Right to Access & Portability: Export your complete consultation history in encrypted JSON format.
- Right to Rectification: Edit calibration baselines or executive profiles at any time.
- Right to Erasure (The Right to be Forgotten): Request full account and data termination, honored within 72 hours.
9. Contact & Governance Office
For formal Data Protection Agreements (DPAs), enterprise security audits, or data requests, contact our security council: