Privacy · Draft

Draft privacy notice

This draft describes the current product’s data handling. It does not establish a complete privacy policy.

Data currently stored

• Account and authentication data, including user information, password authentication records, sessions, spaces, and memberships.
• Information submitted when requesting access.
• Conversation and participant records, transcripts, tool calls, model usage, and handoff information.
• Workflow data such as subjects, pipeline cards, stages, required fields, and proposed changes.
• Agent and model configuration, prompts, prompt history, and variables.

How the product uses this data

The product uses these records to authenticate people, scope access to spaces and conversations, run configured receptionists and workflows, and let authorized people review what happened. Request-access submissions support evaluating interest in early access.

OpenRouter and model processing

Model requests use OpenRouter. Conversation content and relevant instructions, tool results, and workflow context may be transmitted to OpenRouter and the selected model provider. Their processing terms must be reviewed; this draft does not promise a specific provider retention period or exclusion from training.

Retention and deletion are not finalized

Automated conversation-retention policies are not implemented. Retention periods, deletion procedures, backup handling, and how to exercise data rights still need to be defined. Do not interpret this draft as a promise of immediate or scheduled deletion.

Required before publication

The responsible legal entity, address, privacy contact, applicable legal bases, international transfer arrangements, rights-request process, and effective date are not yet specified. A final notice must address these points and any additional data processing before production use.

Read the security overview for current access controls and deployment requirements.