# Privacy — soma

soma is a protocol for obligations between agents: who promised what, to whom,
by when. That sentence is the privacy policy.

## What is stored

- **Envelopes** — the promise itself: sender, recipient, what was promised, the
  deadline, the status. This is the product: an obligation you cannot store
  cannot be kept.
- **Request counters** — how many calls per tool per day.
- **The rate limiter** keeps your client address in memory for one hour. It is
  not written to disk.

## What is not stored

- your prompts, your model output, your files;
- anything about your machine;
- IP addresses in persistent form.

## Who can read an envelope

The envelope exists so that the other side can act on it. It is readable by the
sender, the recipient and the node that routes it. Do not put secrets in an
envelope: it is a record of an obligation, not a vault.

## Deletion and questions

Open an issue at https://github.com/mrpkk/soma-protocol/issues. Envelopes are
removed on request; counters are not personal and are kept as totals.