Privacy policy

1. Information we collect

We collect information you provide directly: your name, email address, and payment details. We also collect usage data such as IP addresses, browser type, and interaction with the Service.

If you connect an AI provider key or a channel token (for example a Telegram bot token), we keep it in our database so we can set up, reconfigure and upgrade your server. AI provider keys are stored encrypted (AES-256-GCM); that includes the OpenRouter key we create for your free AI credits. Channel tokens are kept with your instance's settings. The key is also written to your dedicated server, where your agents use it.

Claude Code instances sign in to your Claude account on the instance itself: you approve the sign-in on claude.com and the credential stays on your server. Sign-in happens on claude.com; we never see your password or store your Claude credentials.

2. How we use your information

We use your information to provide and maintain the Service, process payments, communicate with you, and improve our offering.

3. Data sharing

We do not sell your personal data. We may share information with trusted third-party service providers solely to operate the Service, such as payment processing, cloud hosting, and network delivery.

4. Data retention

We retain your account and billing records for as long as your account is active or as needed to provide the Service. When an instance is torn down, its server is destroyed at once and we do not keep a copy of the data on it. We keep the record of the instance (its name, plan and dates) and the settings it was set up with, which can include the keys and tokens described in section 1. We also keep operational records, such as an audit log of actions on your account, which can include your email address and IP address. When your account is deleted, your name, email address and password are replaced or removed on your account record, and the record itself is kept without them. Our payment provider, Polar, keeps its own payment records under its own policy.

5. Your rights (GDPR)

If you are in the EU/EEA, you have the right to access, correct, or delete your personal data. You may also request data portability or restrict processing. To exercise these rights, or to have your account deleted, email [email protected] from the address on your account. Account deletion is done by our support team on request.

6. Security

We implement security measures including encryption in transit, encryption of the keys we store, access controls, and regular security reviews. Each instance runs on its own dedicated server, which is not shared with other customers. No system is completely secure.

7. AI agents and third-party content

Your agents can read web pages, documents, messages and other content written by third parties. Some of it may contain instructions meant to steer an agent (often called prompt injection). An agent that is steered this way can act on those instructions with whatever it has been given access to, including the keys and tokens it uses, and can send information out. We cannot make an agent immune to this. Only connect the access and give the tasks you are comfortable with, and review what your agents do.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies.

9. Contact

For privacy-related inquiries, contact us at [email protected].