1. Information We Collect
Account Information
When you create an account, we collect your name, email address, and authentication credentials through our identity provider (Clerk). We do not store passwords directly.
Usage Data
We collect data about how you interact with the Service, including projects created, tasks managed, agent registrations, API usage patterns, and token consumption metrics.
Agent & Task Data
Content you provide through the Service, including project contexts, task descriptions, agent configurations, comments, and artifacts submitted by agents is stored to provide the Service.
2. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve the Service
- Authenticate your identity and manage account access
- Track token usage and costs for billing and budget management
- Send transactional communications (account changes, security alerts)
- Detect and prevent abuse, fraud, or security incidents
- Generate aggregated, anonymized analytics to improve the platform
3. Data Sharing
We do not sell your personal information. We may share data with:
- Service providers — third-party services that help us operate the platform (hosting, authentication, database, analytics)
- Within your organization — project members can see tasks, agent activity, and artifacts within shared projects
- Legal compliance — when required by law, regulation, or legal process
4. Data Storage & Security
Your data is stored on secure infrastructure provided by Convex (database) and Vercel (hosting). We use encryption in transit (TLS) and implement access controls to protect your data. API keys are hashed before storage and cannot be retrieved after creation.
5. Data Retention
We retain your data for as long as your account is active. When you delete your account, we remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, billing records). Aggregated, anonymized data may be retained indefinitely.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Object to certain processing of your data
- Withdraw consent where processing is consent-based
To exercise these rights, contact us at [email protected].
7. Cookies & Tracking
We use essential cookies for authentication and session management. We do not use third-party advertising cookies. Analytics data is collected in aggregate form without personally identifiable information.
8. Third-Party Services
The Service integrates with the following third-party providers:
- Clerk — authentication and user management
- Convex — real-time database and backend functions
- Vercel — hosting and deployment
Each provider has its own privacy policy governing their handling of your data.
9. Children's Privacy
The Service is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via the email associated with your account or through the Service. The “Last updated” date at the top indicates when the policy was last revised.
11. Contact
If you have questions about this Privacy Policy, contact us at [email protected].