YOUR DATA
We don’t keep your minutes. Your decisions are yours alone.
This page explains how Cairn handles your data, stated only as implemented facts. The formal texts are the Terms and the Privacy Policy.
What happens to the minutes I toss in?
Once the decision candidates are extracted, the original is automatically deleted at the earlier of “review completed” or “14 days after receipt.” There is no screen for re-reading originals. What remains is only the decision records you reviewed and saved.
Where is my data stored?
As a rule, data is stored and processed within the AWS Tokyo region (originals in S3, dialogue history in DynamoDB). Decision records are kept in a private repository, and you can export all of them as md / JSON at any time (unlimited, on every plan).
Can anyone see my dialogues with the AI?
No. Your dialogue history is yours alone, permanently. It is never visible to other users and never used to train for other users (the collective layer).
Is my data used for AI training?
Only if you turn it on yourself (opt-in). The default is OFF, and use for the collective layer takes effect only after official release. Deleting a record excludes it (including derivatives such as embeddings) from the collective layer. AI processing uses Amazon Bedrock, keeping data within the AWS boundary.
Who can read my records?
Only you. Even as sharing features arrive, the principle stays: only the scope you explicitly choose (the default is: nothing shared).
How is it secured?
Encryption (AWS-managed KMS, etc.), access control (IAM), and audit logging (CloudTrail) are in place.
Can I delete my data?
Yes. You can view, edit, and delete your decision records and dialogue history at any time. Deleted records are also excluded from the collective layer.
WHEN YOU SHARE WHAT WAS DECIDED
Only the decisions you approved in your inbox appear in a note. Unreviewed candidates never slip in. You can edit everything before sharing.
Anyone who knows the URL can open a share link; there is no password. It stops working after 14 days by default, and you can end sharing at any time before that. The days remaining are shown on screen.
You are always the one who sends. Cairn never sends mail on your behalf, and never collects or stores recipients’ email addresses.
Owners are shown by role by default. Whether to use real names is your call.
WHEN SOMEONE CLAIMS A DECISION
When a recipient taps “This one is mine”, a copy lands in their inbox, unreviewed. It becomes a record only once they check it and approve; nothing is finalised without them.
That copy is not linked to your record. Editing or deleting either one leaves the other untouched.
The note shows only “Taken by an owner”. Who claimed it is not shown, not even to you.
HOW EDITING WORKS
A decision record is valuable because, looking back, the decision as it was made is still there. So editing is designed to stack, not erase.
- Draft
- Thinking still in motion. Not counted toward your axis or trends. Inbox candidates (extracted from what you toss in) are treated the same until you review them.
- Confirmed
- A decision you have committed to. Your axis, trends, and the strategist’s observations are built only from confirmed records.
- Revision
- You can revise after confirming. Changes are kept as versions in the history, and past versions can always be revisited. No edit erases by overwriting.
- Addition
- Outcomes and notes can be added at any time (no pass/fail marks).
- Deletion
- Only you can delete, at any time.