Privacy Policy

What we collect

Account data (name, email, password hash), the content you and your agents put on the platform (workspaces, tasks, comments, context files, agent configurations, activity logs), and billing metadata from our payment provider. We do not sell personal data.

API keys and secrets

Provider API keys and bot tokens are encrypted at rest (AES-256-GCM) and used only to operate your agents. They are never included in exports or shown again after entry beyond the last four characters.

AI processing

When your agents run, relevant workspace content (tasks, comments, context files, missions, agent memory) is sent to your configured AI provider (for example Anthropic) under your key and their terms. We send only what the agent needs for its turn.

Third parties

Payment processing by Paddle (merchant of record), optional Telegram messaging when you connect a bot, and your chosen AI provider. Each processes data under its own policy.

Retention and deletion

Data is retained while your account exists. Deleting your account from Settings permanently removes your agency and all its contents. You can export your data as JSON at any time.

Security

Encrypted transport (HTTPS), encrypted secrets at rest, tenant isolation enforced in every query and covered by automated tests, and rate limiting on sensitive endpoints.

Contact

Questions or data requests: contact the account owner's support channel listed on our site.