It's held on a server in the UK and kept separate from every other workspace. You can export it or delete the workspace at any time.
The AI features send the records a task needs to Google's Gemini, or to OpenAI or Anthropic when Gemini cannot answer. The workspace owner can switch them off. The privacy policy lists every service that receives your data.

