Data Policy

CoFusion runs entirely on Cloudflare. Account, business, conversation, and credit records are stored in Cloudflare D1 (a SQL database). Session tokens live in Cloudflare Workers KV, separately from your account data. Cloudflare R2 (file storage) is configured for future use but doesn't currently store any user-uploaded files.

• Account: email address, password hash.
• Business: name, category, location, description, products, services, claim record.
• AI Laboratory: conversations, individual messages, and a log of every AI model call.
• Credits: current balance and a transaction history (grants and usage) per business.

Passwords are hashed with PBKDF2-SHA256 and a unique per-user salt. We never store plaintext passwords. Sessions are opaque tokens stored server-side with an expiry, not tokens that can be decoded or forged client-side. All traffic is served over HTTPS.

We don't sell your personal data.