Privacy & Data.

Your data belongs to you. We are explicit about what we collect, how we use it, and how you can remove it.

What is stored

Account data (users table: email, name, Firebase UID, role, credits, preferences). Agent data (user_agents, agent_configurations). Conversations (conversations + messages tables). Memory (agent_memory, workspace_files). Contacts (agent_contacts). Call logs (call_logs). Credit transactions (credit_transactions). Usage jobs (jobs table).

What we do not do

We do not train AI models on your conversations. We do not sell your data. We do not share your data with third parties without consent. Your messages go to Anthropic to generate responses — Anthropic's zero-data-retention policy applies when using the platform key.

Data export

Export your data at any time with GET /api/account/export (authenticated). The archive is JSON and covers every table that references you: agents, conversations, messages, memories, leads, goals, workspace files, contacts, and credit history. API keys, OAuth tokens and integration secrets are deliberately excluded so the file is safe to keep. Very large tables are capped at 5,000 rows per table and the response says so rather than silently truncating. In the product: Settings → Data & Privacy → Download my data.

Data deletion

Erase your account with DELETE /api/account (authenticated). It walks a generated index of every table in the schema and deletes each row referencing you, including tables reachable only through a parent — messages, knowledge chunks, goal phases. It runs synchronously and returns the exact row count deleted per table. It is irreversible and safe to retry. Two honest limits: rows whose agent id resolves to two different owners are left alone and reported rather than guessed at, and free-text memory that merely mentions an identifier in passing is best-effort. In the product: Settings → Data & Privacy → Delete my account and data.

Infrastructure

Data is stored in Neon PostgreSQL (US-East primary, with read replicas). The backend runs on Cloudflare Workers globally. Both providers are SOC 2 Type II compliant. Data is encrypted at rest (AES-256) and in transit (TLS 1.3).