Privacy Policy

1. Information we collect

Account information: the account name you choose, a display name (the same as your account name unless you change it), and your password, which we store only as a salted one-way hash. Accounts created with an email address before account names were introduced keep that address for signing in.

Content you provide: projects, requirements, conversations with the project agent, generated deliverables, review comments, project knowledge and Harness settings.

Model provider settings: the provider type, address and API key you add. API keys are encrypted at rest and are only ever shown masked.

Technical information: operational logs such as request times, error codes and usage counts (for example the number of model tokens). Logs do not contain your prompts, model responses, deliverable content, keys or session tokens.

2. How we use information

We use your information to provide and secure the service: to sign you in, run your projects, store your deliverables, prevent abuse and fix problems.

We do not sell your information, and we do not use your content to train models.

3. Model providers you connect

When the project agent runs, the relevant content is sent to the model provider you configured, using your own API key. That provider processes it under its own terms and privacy policy, which you should review.

4. Cookies

We use a single essential session cookie to keep you signed in. We do not use advertising or third-party analytics cookies.

5. Sharing

We share information only with service providers that host and operate the service on our behalf, when required by law, or to protect the rights and safety of users and the service.

6. Retention and deletion

We keep your information while your account is active. You can ask us to delete your account and its content at any time; we will delete it within a reasonable period unless we must keep it to meet legal obligations.

7. Security

Data is isolated per workspace, connections use HTTPS, keys are encrypted, and prototypes are previewed in a sandbox. No system is completely secure, so please use a password you do not reuse elsewhere.

8. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to certain processing. We will honour these rights as required by law.

9. Children

The service is not directed to children under 16, and we do not knowingly collect their information.

10. Changes to this policy

We will post any changes on this page and update the date above. For significant changes we will also notify you in the product.