Effective date: 2026-07-15
ShruggieGraph is provided by Shruggie LLC, doing business as ShruggieTech ("ShruggieTech",
"we", "us"). This policy explains
what information we collect when you use ShruggieGraph at graph.shruggie.tech (the "Service"),
how we use it, and the choices you have. ShruggieGraph is a knowledge platform: its purpose is to
store information you choose to give it. We take that seriously, and this policy is written to be
read, not skimmed past.
Information We Collect
Account information. When you create an account we collect your email address, a display name, a username, and authentication credentials (a password hash and, if you enable it, two-factor authentication data). If you upload a profile image, we store that too.
Content you provide. The core of the Service is the knowledge you add: documents you upload, notes you write, and the categories, titles, sensitivity flags, visibility settings, and other metadata you attach. From that content the Service derives structured knowledge (for example facts, events, commitments, entities, and relationships) together with references back to the source material. Derived knowledge is treated with the same protection as the content it came from.
Waitlist information. If you join the waitlist on our landing page, we collect the email address (and name, if provided) you submit, and we use it only to contact you about ShruggieGraph availability and updates.
Usage and technical information. We collect service logs and usage records: things like request identifiers, timestamps, the actions your account performs, job and processing status, error logs, and approximate technical details of your connection (such as IP address and browser type). We also maintain audit logs of security-relevant actions, such as sign-ins, sharing changes, and access grants. These records exist to operate the Service, keep it secure, and let you and us verify what happened and when.
We do not collect information from data brokers, and we do not run third-party advertising or advertising trackers on the Service.
How We Use Information
We use the information described above to:
- Provide the Service: store your content, extract and organize knowledge, and return it to you and to the tools you connect.
- Process your content with AI models as described in the next section.
- Operate, secure, and troubleshoot the Service, including detecting abuse and enforcing our Terms of Service.
- Communicate with you about your account, service changes, and (for waitlist members) availability.
- Understand aggregate usage of the Service so we can improve it. Operational metrics we monitor are aggregated and do not identify individual accounts.
We do not sell your personal information, and we do not share your content for advertising purposes.
AI Processing of Your Content
To turn your documents and notes into organized, searchable knowledge, the Service processes your content with AI models, including models operated by third-party providers (for example, providers of text embedding and language models). This processing happens through provider APIs configured so that your content is not used to train the provider's models.
Processing is governed by a routing policy tied to sensitivity: content flagged as sensitive is restricted to approved processing routes, and if no approved route exists for a sensitive task, the Service declines to process it rather than sending it somewhere unapproved. This fail-closed behavior is a design property of the system, not a best effort.
ShruggieTech does not use your content to train AI models of our own.
How Your Information Is Stored and Protected
Your data is stored on managed cloud infrastructure (currently Google Cloud). We protect it with:
- Encryption in transit (TLS) and encryption at rest provided by our infrastructure.
- Permission scoping enforced at the data layer, so every application, tool, and background process can only reach data its role and tenant allow.
- Isolation between accounts and organizations enforced by database-level security policies.
- Audit logging of security-relevant actions.
- Access controls limiting which ShruggieTech personnel can access production systems, with such access used only to operate and support the Service.
We want to be straightforward about what this does not mean: the Service is not zero-knowledge and is not end-to-end encrypted. Content you store can be processed by our systems (that is how the Service works). If you require storage where the provider cannot technically access content, this Service is not designed for that today.
Sharing and Disclosure
Sharing you control. Content in ShruggieGraph is private to your account by default. It is visible to others only when you deliberately share it: for example, by granting a scoped share to a connection, participating in a shared group or organization, or making parts of a profile public. Shares respect the sensitivity and visibility settings on your content.
Service providers. We share information with the infrastructure and AI providers described above, only as needed to run the Service, and under agreements that restrict their use of it.
Legal requirements. We may disclose information if required to do so by law or valid legal process, or to protect the rights, safety, and security of our users, the public, or the Service.
Business transfers. If ShruggieTech is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy's commitments.
Data Retention and Deletion
We retain your content and account information for as long as your account is active. If you delete specific content, it is removed from the active Service; residual copies in backups are removed as those backups expire. If you delete your account (or ask us to), we will delete your account information and content within a reasonable period, except for records we are required to keep for legal, security, or operational purposes (such as audit logs), which are retained only as long as needed for those purposes.
Waitlist information is retained until you ask to be removed or the waitlist is retired.
Your Choices and Rights
You can access, correct, and organize your content directly in the Service. You can also:
- Request a copy of your data.
- Request correction of account information you cannot change yourself.
- Request deletion of your account and content.
- Opt out of non-essential communications.
To exercise any of these, contact us at admin@shruggie.tech. Depending on where you live, local law may give you additional rights over your personal information; we will honor valid requests consistent with applicable law.
Children
The Service is not directed to children and is not offered to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided us information, contact us at admin@shruggie.tech and we will delete it.
Changes to This Policy
We may update this policy as the Service evolves. If we make material changes, we will notify you through the Service or by email before the changes take effect. The effective date at the top always reflects the current version.
Contact
Shruggie LLC (d/b/a ShruggieTech)
United States
admin@shruggie.tech