Memory & Privacy
What Flowmanner stores, how workspaces scope it, and the privacy guarantees we can actually make.
Workspace scoping
Missions, templates, chat threads, and personal memory are scoped to your
workspace — queries and APIs filter by workspace membership, so members
see the workspace's material, not other tenants'. Personal-memory endpoints
(v2-personal-memory group) manage per-user memory explicitly: you can list
and delete what's stored about your interactions.
What BYOK changes (and what it doesn't)
With BYOK, your keys drive model calls; they are encrypted at rest. All LLM traffic is relayed through Flowmanner's backend — a relay-honest framing, not "we never see your traffic". Prompts are never used for training. Claims beyond these (e.g. absolute GDPR statements) were removed from our guides precisely because we cannot verify them.
Audit trail
Administrative and sensitive actions emit audit records (audit API group)
so workspace owners can reconstruct who did what — pair this with the trust
rules for marketplace interactions (Trust Model).
Deletion
Deleting chat threads archives rather than hard-deletes (soft-delete shipped
2026-08-25, commit 84910e34) — deletion semantics are deliberate so that
undo/audit windows exist. True erasure requests run through data-export /
deletion flows (data-export API group).
Last updated 2026-08-25 (git-derived)