Privacy

Data we use

Account identity, workspace conversations, validated interface versions, installed capability metadata, user-controlled memory, files, usage evidence, and security audit events are stored only when needed to operate the workspace.

Private model reasoning, plaintext platform credentials, passwords, and raw secret values are not stored in workspace records.

External processors

Supabase provides authentication, database, private Storage, and Realtime. Netlify runs the web application. DeepSeek processes prompts when the server provider is configured. Optional sandbox and research providers remain disabled until configured and approved.

Control

You can inspect or delete memory, export workspace metadata, revoke tool access, reset selected layers, or factory-reset workspace data while preserving the account.