Security and your data

Where your data lives

Your AI Board and Your AI Empire save your work as files on your computer, and in any cloud folder you choose (like iCloud Drive or Google Drive). We don't host them, see them or keep a copy. That also means we can't recover them, so keep a backup of your save folder. We'll show you how.

Your AI keys

On a Mac, keys you connect are kept in your Mac's Keychain and used only by the Tower's helper on your computer. On other computers during the beta they're kept in your web browser. We never see your keys. On a setup call, you type everything; we never ask for, see or type your passwords or keys. Set a spending limit with each AI company, and delete any key you think may have leaked.

What reaches us, and where it's kept

• Your free-map sign-up (name, email, the boxes you ticked and a short summary of your map) and what you buy are kept in GoHighLevel, the system that runs our contact list and checkout.
• Card payments are handled by Stripe. We never see or store your full card number.
• Our accounts use two-step sign-in, and only the people who need the information can see it.

The full list is on Who helps us run it.

This website

stratostower.com is plain pages served over a secure connection (HTTPS) by Cloudflare. There are no accounts to sign in to, no analytics and no ad trackers. The free Inner Circle Map keeps your answers in your own browser; only your sign-up is sent to us.

What we haven't done yet

We're a small company, and we'd rather be honest than sound big. We haven't had an outside security audit or a certification (like SOC 2). Because your data stays with you, most of the risk lives on your own computer and accounts. If we add an audit, we'll say so here, with the date.

What you can do

• Turn on FileVault (your Mac's disk encryption) and a screen lock.
• Install updates for your Mac, your browser and Ollama.
• Use strong passwords and two-step sign-in, especially on your email and AI accounts.
• Back up your save folder.
• Don't let anyone you don't trust use your computer or see your screen.

The Terms include a short safety checklist.

Report a security problem

Email [email protected] with "Security" in the subject. Tell us what you found, where, and how to see it again. A real person reads it, and we aim to reply within 5 business days.

We welcome reports made in good faith. Please don't access or change anyone else's information, don't disrupt our services, and give us a fair chance to fix the problem before you tell anyone else. We publish this contact for security researchers at security.txt.

If something goes wrong

If information we hold about you were ever exposed, we would tell you as the law requires, and say what happened and what we're doing about it.