Privacy Policy

What we never receive

Source code, file contents, repository paths, prompts, agent output, terminal output, and the contents of your git history. These stay on your machine. The app has no telemetry channel that carries them, and that is enforced by tests in the product, not by policy alone.

Your agent CLI credentials. Keys you give the app are stored in the macOS Keychain, are never logged, and are never transmitted to us.

What we store when you have an account

Your e-mail address and password hash (or the identifier from the identity provider you signed in with), your subscription state, and a record per signed-in device: a device name, platform and the last time it was seen. That is the whole account record.

What we store for the waitlist

Your e-mail address, the moment you submitted it, the moment you confirmed it, and a single-use confirmation token that expires after 7 days. We also keep a short-lived, hashed record of the network address a submission came from, purely to stop someone from flooding the form; it is deleted within 24 hours.

Nothing else. No name, no company, no tracking pixel in the confirmation e-mail. If you never click the confirmation link, the pending row is deleted after 7 days.

Website analytics

This site uses no cookies for advertising or tracking, and sets no third-party tracking cookies at all. If and when we add traffic measurement it will be a cookieless, aggregate product, and this page will say which one and from when.

In-app analytics

Off by default. If you turn it on, it sends anonymous, event-level facts — "an organisation was created", "a first directive was sent" — and never a path, a prompt, a file name or a piece of code. You can turn it off again at any time.

Who else touches the data

Only the sub-processors listed on the sub-processors page, each for a named purpose. We do not sell personal data, and we do not share it for anyone else’s marketing.

How long we keep it

Account data for as long as the account exists, then deleted within 30 days of closure except where tax law requires an invoice record to be kept longer. Waitlist addresses until you unsubscribe or the list is closed, whichever comes first.

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, and object to processing. Write to the privacy address below and you will get an answer within 30 days. Under GDPR you may also complain to your local supervisory authority; under KVKK, to the Turkish Personal Data Protection Authority.