Version 1.1 — August 2026
The controller of personal data is Casini Luigi, based in Italy. For anything relating to privacy: privacy@delfi-memory.com.
Delfi collects and processes the following personal data:
Data is processed for the following purposes:
Delfi does not train its own artificial intelligence models, does not sell user data, and does not pass it to third parties for marketing or commercial profiling. On what the language model providers do with it, see section 4.
For the AI assistant to work, the content of conversations is sent to third-party language model providers and to the services that route requests to them. These are the only categories of recipient: no other party receives users' personal data, and in particular it is not received by advertisers, financial intermediaries, issuers, or anyone who would process it for commercial purposes.
The providers we use change over time — some are added, some are dropped. That is why we do not list them on this page, where a list would go stale without you noticing: an up-to-date list of the providers your content may be sent to is available at any time, by writing to privacy@delfi-memory.com from your account's address. We will reply with the names.
When you configure your own API keys (BYOK mode), data goes to the provider you chose. In every case, providers receive only the content of the current conversation and the context needed to answer, never your entire history.
Use of content by providers. The terms that apply depend on the provider and on the plan under which each answer is served. Several providers reserve the right to use the content they receive — prompts and responses — to develop and improve their own models and services, and in some cases provide that such content may be reviewed by their staff. These terms are set by each provider, can change over time, and Delfi is not in a position to guarantee or alter them. The paid plans of most providers exclude the use of content for training: by configuring your own API keys (BYOK mode) you choose the provider and the plan, and therefore the terms that apply to your content.
No other third party has access to users' personal data.
Some providers are based outside the European Union — in the United States and in other third countries. Where the European Commission has adopted an adequacy decision, the transfer takes place on that basis; otherwise we rely on the standard contractual clauses adopted by the European Commission and on the safeguards offered by each provider.
We would rather tell you than stay quiet: some of those countries have no adequacy decision from the European Commission, and for them contractual clauses have recognised limits — no private contract can bind the authorities of a foreign state.
For this reason at first sign-in we ask for your explicit consent, naming the transfer, before you tick the box: this is the condition set out in Art. 49(1)(a) GDPR, and your acceptance is recorded with the date and the version of the documents you read. You can withdraw that consent at any time by writing to privacy@delfi-memory.com: withdrawal cannot undo transfers that already happened, but from that moment your content stops leaving — and with it the conversational part of the service stops, which is the only part that sends it. The rest of Delfi keeps working.
Finally, there is a route that does not go through us at all: by configuring your own API keys (BYOK mode) and choosing a provider based in the Union, your conversations follow the path you chose.
Under the GDPR, you have the right to:
To exercise your rights, write to privacy@delfi-memory.com.
The rules of use provide for account suspension in the cases described there. While a suspension is in progress, deletion of your data and of your account is temporarily suspended: the data under review is retained as evidence, under Art. 17(3)(e) GDPR, which allows a deletion request not to be acted upon where processing is necessary for the establishment, exercise or defence of legal claims.
This limitation is not open-ended: it operates for a maximum of 30 days from the opening of the review, after which deletion becomes available again even if the review is still in progress. During suspension the rest of the platform keeps working, and the interface tells you the date on which the limitation ends. If you believe the suspension is wrong, you can contest it by writing to privacy@delfi-memory.com; your right to complain to the supervisory authority remains unaffected.
Delfi does not use profiling cookies. Authentication uses a JWT stored in the browser (localStorage). Usage statistics are collected through Umami, a self-hosted analytics system that uses no cookies and collects no personally identifiable data.
Delfi does not provide financial advice and is not authorised to provide it. What Pizia returns is for information only and is not investment advice tailored to your situation. The same holds for the other fields you can discuss inside Delfi — legal, tax, insurance, property, pension or health matters: they are not advice and do not replace a qualified professional. You are solely responsible for your own decisions. The full perimeter is in the Legal notice.
Some market and macroeconomic data shown in the platform comes from external sources whose terms require attribution. We give it here, valid across all of Delfi:
This policy may be updated from time to time. The current version will always be available on this page. Where changes are substantial, users will be informed through the platform.