Star Install CLI →
SOPHIALABS // GANTLETT SYSTEMS INC. · PRIVACY CHARTER

Privacy Policy & Local-First Stewardship

SophiaLabs is the open-core R&D division of Gantlett Systems Inc. (Federal & Ontario Corporation, Ontario, Canada). Our software and web portals are built so your source code stays on your machine and your browsing is never auctioned to ad networks.

EFFECTIVE NOVEMBER 6, 2026 PIPEDA ALIGNED ZERO AD PIXELS ONTARIO, CANADA
0 Ad Trackers

Zero Google Analytics, Meta Pixel, or third-party ad cookies

0 CLI Phone-Home

Apache 2.0 Nomos CLI executes 100% offline on local SQLite & Git

0 Data Resale

Client & visitor inquiries are never sold, brokered, or used to train models

PIPEDA Aligned

Canadian federal & Ontario corporate stewardship ([email protected])

SEC-01 · OPEN-CORE CLI & BROWSER EXTENSION PRIVACY

Zero Phone-Home Telemetry in Nomos CLI & Conduit Local Tools

SophiaLabs is the R&D division of Gantlett Systems Inc. Our developer tools are engineered around deterministic local execution so your codebase and prompts stay on your machine.

  • Nomos Open-Core CLI (mgantlett/nomos): Executes 42 AST & Definition of Done gates, hermetic Git worktrees, and pure-Go SQLite memory (mneme.db) 100% locally with zero phone-home telemetry, zero cloud accounts, and zero source-code uploads.
  • Install & Release Endpoints (/install, /uninstall, GitHub Releases): Fetching the shell installer or release checksums records only aggregate HTTP request counts to monitor release distribution health.
  • Conduit Browser Extension (/conduit/privacy): Our Manifest V3 developer extension processes DOM and MCP context strictly on 127.0.0.1 / localhost with zero external data transmission (see dedicated extension policy at sophialabs.ca/conduit/privacy).
SEC-02 · FIRST-PARTY TELEMETRY & PERIMETER SECURITY

First-Party Web Telemetry, Browser Storage & WAF Security Logs

We operate cookieless first-party operational telemetry to measure aggregate documentation readership, CLI install health, and perimeter security without cross-site tracking cookies.

  • Zero Third-Party Tracking Cookies: Neither gantlett.io nor sophialabs.ca loads Google Analytics, advertising pixels, session-replay scripts, or third-party behavioral profiling SDKs.
  • Cookieless First-Party Beacons (/api/beacon & /go/*): Same-origin navigation and shortlink events record page path, referrer, viewport class (desktop/mobile/tablet), read-time duration, and a non-persistent session hash rather than persistent tracking cookies.
  • Local Browser Preferences (localStorage): UI preferences such as Light/Dark theme selection on gantlett.io and unread chapter/specification watermarks on sophialabs.ca remain strictly in your local browser storage.
  • Edge & Origin Security Logs (Nomos Firewall): Cloudflare CDN/WAF and Google Cloud Run process request IP addresses, country codes, TLS metadata, and User-Agent strings to enforce rate limits, block exploit probes, and maintain service availability.
SEC-03 · INTERACTIVE SOPHIA AI & ADVISORY INQUIRIES

Interactive Sophia Architect Chat & Advisory Intake

SophiaLabs provides optional interactive AI grounding and direct Principal Architect advisory intake without requiring user accounts or persistent identity profiles.

  • Interactive Sophia AI (/api/chat/*): Questions submitted in the SophiaLabs chat drawer are routed over TLS to our dedicated sovereign RTX 4080 GPU node in Ontario, Canada to return grounded Nomos documentation and architecture answers. Do not submit secrets, API keys, or regulated personal data in public chat.
  • Architecture Advisory & Dispatch Requests (/api/contact): If you submit an advisory inquiry or leave contact details when the GPU queue is busy, we use your name, email/handle, organization, and message strictly to reply to your inquiry.
  • Public Community Benchmarks: Contributions submitted via public GitHub Pull Requests (such as TraceTrial-Bench community runs on github.com/mgantlett/nomos) are public open-source records governed by GitHub's terms and the Apache 2.0 license.
SEC-04 · INFRASTRUCTURE, RETENTION & TRANSFERS

Infrastructure Subprocessors, Data Retention & Cross-Border Processing

Gantlett Systems Inc. minimizes external dependencies and processes portal traffic strictly through hardened North American cloud and sovereign hardware infrastructure.

  • Infrastructure Providers: Public web portals are served via Cloudflare (global edge TLS, CDN caching, and WAF) and Google Cloud Run (North America stateless containers), while interactive AI inference runs on dedicated Gantlett Systems sovereign GPU hardware in Ontario, Canada.
  • Operator Dispatch Bridge: Voluntarily submitted consultation or advisory intake forms (/api/contact) notify our Principal Systems Architect via an authenticated internal Discord webhook and internal Gantlett Systems intake queue.
  • Retention Boundaries: Ephemeral security and funnel logs are retained only as required for abuse prevention, capacity planning, and aggregate reliability diagnostics; client and prospect correspondence is retained for active engagement records and deleted upon verified request.
  • No Model Training or Brokerage: We never sell, rent, or broker personal information, and we never submit client inquiries or repository artifacts to public foundation-model training pipelines.
SEC-05 · STATUTORY RIGHTS & PRIVACY OFFICER

Your Privacy Rights (PIPEDA, Quebec Law 25, GDPR & CCPA) & Contact

Gantlett Systems Inc. (a Federal and Ontario Corporation headquartered in Ontario, Canada) adheres to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and respects global data-subject rights.

  • Access, Correction & Deletion: You may request access to, correction of, or deletion of any personal contact information you have voluntarily submitted to us.
  • Withdrawal of Consent: You may withdraw consent for prospective advisory follow-ups at any time by replying to an email thread or contacting our Privacy Officer.
  • Enterprise & Regulated Engagements: Institutional engagements (including the 14-Day AI Governance & Seam Charter Pilot and air-gapped Sovereign deployments) are governed by mutually executed Non-Disclosure Agreements (NDAs) and Master Services Agreements (MSAs) where client source code remains inside client-controlled environments.
  • Privacy Officer Contact: Direct all privacy inquiries, access requests, or security disclosures to Mark Gantlett, Principal Systems Architect & Privacy Officer, Gantlett Systems Inc., Ontario, Canada at [email protected].
RELATED POLICIES & DIRECT CONTACT

Extension Policy, Corporate Practice & Privacy Officer

Questions, PIPEDA / GDPR / CCPA data requests, or security disclosures can be sent directly to our Privacy Officer at [email protected].

Conduit Extension Privacy Policy → Gantlett Systems Corporate Policy ↗ Email [email protected]
Ask SophiaRTX 4080 Sophia AI · Live Architecture Concierge (Local RTX 4080)