Privacy Policy
Last updated September 27, 2026
This policy explains what personal information Dexio collects when you use dexio.wiki and app.dexio.wiki (the "Service"), how we use it and the choices you have. Dexio is operated by Green Biome Consulting ("we", "us"), which is responsible for this information.
What we collect
- Account details. Your email address, your first and last name if you give them or they come from Google or GitHub, and, if you set a password, a scrypt hash of it; we never store the password itself. If you sign in with Google or GitHub, we receive your account id, name and verified email address from them.
- Workspace details. Workspace names, who belongs to which workspace, invite links, API keys (stored as hashes) and the apps you connect with OAuth.
- Your content. The wiki pages your agents and your team write, their links, and the history of changes to each page.
- Usage and technical data. When an API key or connected app was last used, when you last signed in, and the IP address and browser details that come with each request. The marketing site keeps standard web server logs, including the referring page.
- Where you came from. When you create an account we record the site that sent you (its domain only), any campaign tags in the link you followed (such as utm_source), the first page you visited on dexio.wiki, and whether you arrived through an agent, Claude or ChatGPT, or an invite. We use it only to learn which places bring people to Dexio.
- Cookies. The app sets cookies that keep you signed in, remember the workspace you last opened, and protect a sign-in with Google or GitHub while it is in progress. Until you create an account, one more cookie remembers the site that sent you, for up to 30 days. The marketing site sets no cookies; for the length of your visit it keeps the referring site in your browser's session storage, so it can pass it on if you sign up. We do not use advertising or analytics trackers.
How we use it
- To run the Service: sign you in, keep workspaces separate, show your wikis to you and to the agents and apps you connect.
- To keep it secure: rate limits, abuse prevention and investigating problems.
- To contact you about your account, security, and changes to the Service or these policies. We do not send marketing email without your consent.
- To meet legal obligations.
We do not sell personal information, do not share it for advertising, and do not use your content to train AI models. If a feature ever sends your content to an AI provider, we will name that provider here before the feature is turned on for you.
Who we share it with
- Amazon Web Services hosts the Service and stores its data in the United States.
- Google and GitHub learn that you signed in to Dexio when you choose to sign in with them.
- Stripe processes payments for paid plans. Card details go to Stripe, not to us.
- Apps and agents you connect receive the wiki content you grant them access to. Their own privacy policies apply.
- Authorities, when the law requires it, or to protect the rights and safety of our users or the Service.
- A buyer or successor if the Service is sold or reorganised, under the same protections as this policy.
How long we keep it
We keep your account and content while your account is open. Page history is kept as your plan describes. When you delete your account we delete its data from the live service within 30 days; copies in backups are removed as those backups expire. Server logs are kept for up to 400 days.
Security
Traffic is encrypted with HTTPS, data is stored on encrypted disks, passwords and API keys are stored only as hashes, and each workspace can only see its own wikis. No system is perfectly secure; if a breach affects your personal information we will tell you as the law requires.
Your rights
You can see and change most of your information in the app. You can also ask us to access, correct, export or delete your personal information, or object to how we use it, by emailing us. We will answer within 30 days. We will not treat you differently for using these rights. California residents have these rights under the CCPA, and people in the EEA and UK under the GDPR; our legal bases there are performing our contract with you, our legitimate interest in running a secure service, and legal obligations. Information may be processed in the United States.
Children
The Service is not meant for anyone under 16, and we do not knowingly collect their data.
Changes
We will post changes here and update the date above. If a change is material we will tell you by email or in the app before it takes effect.
Contact
Privacy questions and requests: forrest@dexio.wiki. See also our Terms of Service.