Privacy and Permissions

• Every connection belongs to the authenticated Empire member who created it.
• Provider tokens are stored in Empire’s encrypted server-side vault. They are not returned to the browser.
• Empire uses fixed, approved provider addresses and a limited list of read tools.
• Chat reads require an explicit connected-source request.
• Notion and Google Drive writes happen only after a member presses a save action and chooses a destination.
• Connected-source material is treated as outside evidence, not as trusted instructions.
• Source results can stay in the current chat so follow-up questions make sense, but they are excluded from Empire’s durable automatic memory extraction.
• Disconnecting stops future access. Existing chats and documents already saved to the provider remain where they were created.

Never send passwords, OAuth codes, access tokens, or secret keys to Empire or support.

Updated on: 28/08/2026