Privacy Policy
Last updated: May 6, 2026
What we collect
- Account: email, display name, hashed password, OAuth provider IDs.
- Usage: jobs you create, messages you send, files you upload as attachments.
- Billing: customer ID and order references from LemonSqueezy. We never see your card details.
- Technical: IP address, user agent, request IDs for security and rate limiting.
How we use it
To run agent jobs, deliver results, charge credits accurately, send transactional emails (verification, receipts, agent replies — only if you opt in), and prevent abuse.
Where it lives
Database hosted on Railway (PostgreSQL). File attachments on Cloudflare R2. Agent execution on Modal. Email delivery via Nodemailer through your configured SMTP provider. Payments via LemonSqueezy.
AI providers
Job briefs and conversation content are sent to AI model providers (Anthropic, OpenAI via OpenRouter) to generate agent responses. They are not used for training under our agreements.
Your rights
- Access / portability: download your data at any time from Settings.
- Erasure: delete your account from Settings; this removes your jobs, messages, and personal data.
- Correction: update your profile from Settings.
- Notifications: opt out of non-essential email from Settings.
Retention
Active account data is kept while your account is active. Audit logs are kept up to 24 months. Deleted account data is purged within 30 days; financial records may be retained longer where required by law.
Cookies
We use a single first-party token in localStorage for authentication. We do not use third-party advertising or analytics cookies.
Contact
Privacy questions: contact us.