Last updated: September 26, 2026
Account: your email, name, and avatar from sign-in (Google, GitHub, Microsoft, or email + password — passwords are stored as salted hashes, never in plain text).
Usage: your runs, watches, sleep agents, saved memory, uploaded docs, and settings so the product works.
Billing: subscription status, payment history, and receipts. Payments are processed by PayPal — we never see or store your card numbers.
We use one HttpOnly session cookie to keep you signed in. That's it — no advertising trackers.
We don't sell your data. We don't read your Gmail or Calendar beyond what you explicitly ask the agent to do, and anything the agent proposes there needs your approval first.
Delete saved memory, watches, docs, and replays anytime in the app. Cancel your subscription in Settings → Billing. Ask us to delete your account and we'll remove your data.
Sessions are signed tokens, secrets stay on the server, and payment webhooks are signature-verified before we trust them.