Privacy policy

Status

This page has not been reviewed by legal counsel. It lists the facts that a privacy policy for this website and the managed cloud must cover; the binding policy will replace it before the managed cloud is generally available.

This website

• The website is served as static pages and sets no cookies of its own.
• Analytics run only if the operator configures a provider. Providers that set cookies or identifiers load only after you accept them in the consent banner; you can change your choice under Cookie settings in the footer.
• Contact is by email; we receive what you send.

The managed cloud (facts to be covered)

• Account data: name, email, password hash, optional two-factor secrets (encrypted), connected sign-in identities.
• Organization data: projects, tasks, timelines (including agent output and verification logs), reports, artifacts, audit log entries, capability manifests, encrypted secrets.
• Billing data is processed by our payment provider; we store plan, status and provider references.
• Your repositories are not cloned or stored by the control plane; agents run on your own workers.

Self-hosted installations

Self-hosted installations send nothing to us. Their operators are responsible for the data they process.

Contact

Questions about this page: see contact.