Privacy · Punctum

What Punctum keeps, and who else sees it.

Updated 13 November 2026

Who is responsible

Punctum is made by C-Point Labs. Maarten Tolhuijs runs C-Point Labs from the Netherlands and is responsible for your data here. Write to hello@c-pointlabs.com with any question or request about it.

What Punctum keeps

• Your e-mail address, as Google, Microsoft or GitHub gives it, to know which trees are yours and to mail you a code when an existing account needs confirming.
• If you sign in with Google, Microsoft or GitHub, the WorkOS user ID that stands for you, the address it gave, and while you stay signed in, its session and an encrypted token to check that session once a minute. Signing out deletes the session and token. A code to join an existing account is kept for a day.
• Your trees: every thesis, point, explanation and report you write, and which points came from the second voice.
• Your context, if you write one: what you tell the second voice about yourself, so its points fit you. Empty it and it is gone.
• Sign-in links, stored only as a hash. A link works once, for twenty minutes. To stop anyone having strangers mailed in bulk, a link also records a keyed hash of the network it was asked from. Links are deleted after a day.
• Two cookies: punctum_session, that keeps you signed in for up to 60 days, and punctum_lang, the language you chose, for a year. Signing out ends the first. There are no analytics, advertising or tracking cookies. Your choice of light or dark stays in your own browser.
• Your credits: what you bought, and for each answer of the second voice that you paid for or that was free: when, which model, for which of your trees, how many tokens it took and what it cost. Not what was asked or answered.
• Your payments: for each pack you buy, Mollie's payment ID, the amount, how you paid (for example iDEAL), its status and when, and the receipt's number. Never your bank or card details.
• If you share a tree or join one: the name you give, who is on which tree and what each may do, who wrote which point, and the invitation link, stored only as a hash and an encrypted copy. A third cookie, punctum_join, exists only then: it remembers an invitation for half an hour while you sign in.

Punctum does not sell your data, show advertising, or use your trees to train models.

Who else sees it

The second voice. Nothing leaves Punctum until you ask. When you ask the second voice about a point, the thesis, the line of points down to that point and the points already under it are sent to a model. When you ask it to draft a report, the whole tree is sent. Your context, if you wrote one, is sent with both. Your e-mail address is never sent.

It goes to HostYourAI (HostYourAI B.V., Groningen, the Netherlands), which runs the open model you chose on servers in the EU. Under its processing agreement with C-Point Labs it does not keep what you send or what the model answers, and does not use it to train models.

Payments. When you buy credits, you pay on the page of Mollie (Mollie B.V., Amsterdam, the Netherlands), which handles your bank or card details under its own privacy statement. Punctum sends it the amount, a description and its own numbers for your account and the payment, and hears back whether and how you paid. Your e-mail address is not sent.

Mail. Sign-in links, codes and receipts are sent by Resend, which sees your address and the mail. Its main processing is in the United States.

Signing in. If you continue with Google, Microsoft or GitHub, the sign-in goes through WorkOS (WorkOS, Inc., United States), which receives your name and address from that provider and tells Punctum who you are. Punctum receives no password and nothing else from your account there.

People on a tree you share. A tree is yours alone until you send someone its invitation link. Everyone on a shared tree sees its points, explanations and report, the name of each person on it, who wrote what, who has it open now and which point they have open. The tree's owner also sees each member's e-mail address. Your context is never shown to the others; when you ask the second voice on a shared tree, it reads yours.

Live updates. So that changes show at once, your browser keeps a connection to a socket server that C-Point Labs runs itself, beside Punctum. Through it go your name, the number of the tree and of the point you have open, and the fact that something changed. Never the words of a point, never your e-mail address. It stores none of it.

The server. The web server records each request's IP address, path and time in access logs, to run and protect the site. Logs are deleted after two weeks at the latest. Sign-in links never appear in them.

Where data goes to the United States, the providers rely on the EU's standard contractual clauses or the EU-U.S. Data Privacy Framework.

Why

Punctum keeps what it needs to give you the service you signed up for, payment records because the law requires them, and the network hash and logs because it has a legitimate interest in keeping the service safe.

How long

Your account and trees stay until you ask for them to be deleted. Deleting a tree sets it aside, so you can bring it back; to have it erased for good, ask. When you ask for your account to be deleted, it goes with every tree and link in it. Records of payments stay for seven years, without your address, because Dutch tax law requires it.

Your rights

You can ask to see, correct, export or delete your data, or object to how it is used. Write to hello@c-pointlabs.com; you will have an answer within a month. If you are not satisfied, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.