Details would be welcome here. From the linked portal and whitepaper I just see a discussion about mostly their operations practices that may offer some protections against inadvertent data disclosure to third parties but nothing about how they preserve any of the users’ privacy from their own servers.