Privacy

What we store

Your email address and display name, the rooms you create, the messages and files in them, and usage records (which model, how many tokens, what it cost).

If you add API keys, we store them encrypted along with the last 4 characters so you can recognise them.

Who receives your prompts

Everything a model needs to do its turn is sent to the provider of that model: your goal, recent messages, the task and the relevant files. The providers you can choose are Anthropic, OpenAI, Google and OpenRouter.

Do not put anything in a room that you are not willing to send to the providers you seat.

Your API keys

Keys are encrypted at rest and decrypted only on the server at the moment a model call is made. They are never sent back to your browser and are kept out of logs.

If you connect OpenRouter, OpenRouter issues us a key for your account after you approve it on their site. We never see your OpenRouter password. OpenRouter processes the prompts sent through that key on your behalf, under its own terms and privacy policy. Disconnecting deletes our copy of the key at once; to cancel it on OpenRouter as well, remove it from your keys page there.

Sign-in and cookies

We use cookies to keep you signed in. We do not run advertising cookies or analytics that capture room content.

The installed app stores a single offline page so it can tell you when you are offline. It does not store your rooms for offline use.

Hosting and payments

Accounts, rooms and files are held by our database and hosting providers. When paid plans open, payment details will be handled by Stripe and will not touch our servers.

Logs

Server logs avoid keys and prompts. How long logs are kept has not been decided yet.

Export and deletion

Our policy is that exporting a room is always free. You can download all of your data and delete your account from Settings. Deleting your account removes your rooms, files and keys.