How is my data secured?
Your data is encrypted at rest with per-actor keys, so each account's data is cryptographically isolated from every other, and encrypted in transit. Access is purpose-bound and written to an immutable audit ledger.
One store is an exception: the search index that lets the assistant find things by meaning holds a short excerpt of each indexed item unencrypted. Those rows are still confined to your own account, and Security at Lonzo describes exactly what the exception covers and what protects them instead.
That structural isolation means one account's data can't bleed into another's. Deleting your account removes its data from our live systems, and residual copies age out of our encrypted backups within 90 days — we don't destroy a per-account key as part of deletion, and the Data Retention & Deletion Policy explains exactly what that does and does not guarantee. For the full account of encryption, access controls, incident response, and sub-processors, see the Security at Lonzo.
See also: How do I delete my data? · Who are your subprocessors?