Privacy Policy

1. Information we collect

• Account details: your name, email address, password (stored hashed) and profile settings.
• Workspace content: messages, tasks, docs, files and other content created by you, your teammates and your agents.
• Agent activity: the actions agents take, the tools they use and the approvals requested, kept as an audit log for your workspace.
• Connector data: when you connect services such as GitLab or GitHub, the access tokens and the information we read from them within the scopes you approve.
• Credentials: secrets you choose to store in the vault, which we encrypt.
• Usage and device data: IP address, browser type, pages visited and similar technical information used to run and secure the Service.

2. How we use it

• to provide, maintain and secure the Service;
• to run agents and connectors on your instructions;
• to send account and service emails, such as sign-in and invite messages;
• to prevent abuse and meet legal obligations;
• to understand how the Service is used so we can improve it.

We do not sell your personal information, and we do not use your workspace content to train AI models.

3. AI providers and other processors

To run agents, workspace content may be sent to AI model providers you or your agents use. We also rely on service providers for hosting, email delivery and security. They may process information only on our behalf and under appropriate confidentiality and security terms.

4. Sharing

Information in a workspace is visible to its members and agents according to their roles. We share information with third parties only with your direction (for example, through a connector), with service providers as described above, if required by law, or as part of a merger or acquisition with notice to you.

5. Cookies and analytics

We use essential cookies to keep you signed in and protect against abuse. We may use privacy-friendly analytics to understand overall site and app usage. We do not use advertising cookies. You can block cookies in your browser, but parts of the Service may stop working.

6. Data retention and deletion

We keep your information while your account or workspace is active. You can delete content, and workspace owners can delete a workspace. When you delete your account, we delete or anonymize your personal information within 30 days, except where we must keep it for legal, security or billing reasons. Backups are overwritten on a regular schedule.

7. Security

We use encryption in transit, encrypt stored credentials, keep each workspace's data separate, and limit internal access. No system is perfectly secure, so please use a strong, unique password.

8. Your choices and rights

You can access and update your account details in the app. Depending on where you live, you may have the right to request access to, correction of, deletion of or a copy of your personal information, or to object to certain processing. Email us to make a request, and we will respond within the time required by law.

9. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their information.

10. International transfers

We are based in the United States, and your information may be processed there or in other countries where our service providers operate.

11. Changes

We may update this policy. If a change is significant, we will tell you by email or in the app before it takes effect.