Privacy Policy

• Account data — your email address, name and (optionally) company, and the time you accepted the terms.
• Project data — your chat messages, attachments, workspace files and their version history.
• AI provider settings — which provider and model you chose, its base URL, and your API key, stored encrypted (AES-256-GCM). Only the last four characters are ever displayed.
• Login records — hashed one-time codes (deleted on use or expiry) and hashed refresh tokens with the browser's user agent, so you can sign out everywhere.
• Server logs — IP addresses and request metadata, kept briefly for security and rate limiting. We do not run third-party analytics or advertising trackers in the app.

To run the Service: sign you in, keep your projects, and send your prompts and files to the AI provider you connected so it can answer. We do not sell personal data and do not use your projects to train models.

Your prompts, attachments and project files are sent to the provider you configured (Anthropic, OpenAI, or an Ollama endpoint you control) under that provider's privacy terms. Login codes are delivered by email. Our servers and database are hosted with Oracle Cloud; the web app is served by Cloudflare.

Data is kept while your account exists. Deleting a project removes its messages, files and history. Deleting your account (Settings → Danger zone) removes everything above, including stored keys, immediately and permanently.

You can view and edit your profile in Settings, download any project as a ZIP, and delete projects or your whole account yourself. For anything else — access, correction or a copy of your data — email us and we will respond within 30 days.

The app keeps your session tokens and interface preferences in your browser's local storage. It sets no advertising cookies.