Legal · updated 16 October 2026
We keep browser storage to the minimum needed to sign you in and to keep your work when the network drops.
The application stores an access token and a refresh token in localStorage, a device identifier, your last selected thread, and your sync cursor. Messages, nodes and edges are queued in IndexedDB.
No advertising identifiers, no cross-site trackers, no third-party analytics scripts on the marketing pages or in the application.
The tokens are required to authenticate API calls; the offline queue is what makes the client work on a flaky connection. Without them the application cannot function.
Access tokens expire after 30 minutes and refresh tokens after 30 days, or sooner when an administrator revokes sessions or suspends an account.
Signing out clears the tokens. Clearing site data in your browser removes the offline queue as well, so unsent messages are discarded - sync them first.
Questions about this policy: support@intranetos.com or +2 01001945390.
Questions about this document: support@intranetos.com · +2 01001945390 · graphflow.intranetos.com
graphflow.intranetos.com