Habiff One· governed access
Habiff One · preview

Privacy

Last updated 27 October 2026

What this is

Habiff One is a preview build of a governed access layer for AI assistants. You connect apps, choose what each assistant may do, and every call is recorded. It is not affiliated with Upstash or Upsy.

What is stored

Your email address, the assistants you create, the apps you connect, the permissions you set, approval cards, memory you write, files you upload, playbooks, meetings, and the receipts generated by tool calls. Provider access tokens, when live connections are enabled, are encrypted at rest with AES-256-GCM under a server-held key.

What is not stored

Your provider passwords. Assistants never receive them, because they call this service rather than the provider. This application runs no analytics or advertising code of its own. Cloudflare, which serves these pages, may inject its own Web Analytics beacon at the edge; it can be disabled in the Cloudflare dashboard for the zone, and it is not used to profile assistant activity.

Demo mode

Until OAuth client credentials are configured, app connections run in demo mode: tool results are generated locally and labelled demo:true. Nothing is read, sent or deleted in a real account.

Retention and export

Receipts are append-only for the life of the account. You can export the full ledger at any time from Receipts, and delete an assistant, which removes its grants and revokes its tokens. Deleting your account removes its rows; ask the operator if you need confirmation.

Contact

This preview is operated by the Habiff project. For data requests, use the contact address published on habiff.si.

Back to Habiff One