This is a plain-language baseline describing what we collect and why. It does not replace advice from qualified counsel before general availability.

1. What we collect

• Account data: your email address, and — if you sign in with Google or GitHub — the identifier and profile basics those providers return.
• Operational data: the tasks you submit, their status, logs, costs and results, so we can run and show your work.
• Connection data: the servers and model providers you connect. Credentials and secrets are encrypted at rest.
• Product analytics: aggregate, non-identifying usage signals on the marketing site to understand traffic.

2. How we use it

We use your data only to operate the Service for you: authenticating you, running and reporting your tasks, enforcing cost caps, and keeping the Service secure. We do not sell your data.

3. Third parties

When you connect a model provider or server, your task data is sent to those systems to do the work you requested. Their handling of that data is governed by their own terms. We use a content-delivery and tunnel provider to serve the site securely.

4. Security

Secrets and connection credentials are encrypted at rest. Access to the Service requires authentication. We take reasonable measures to protect your data, though no system is perfectly secure.

5. Data retention and deletion

We keep your data while your account is active. You can delete your account at any time from the settings screen. Deleting your account removes your user record and cascades to your connected servers, tasks, subtasks, logs and connection secrets. Aggregate, non-identifying counters used for product metrics are not tied to your identity and may be retained.

6. Your rights

You may access, correct or delete your personal data. Account deletion is self-service; for any other request, contact us.

7. Contact

Privacy questions or requests: [email protected].