{% extends "base.html" %}
{% block title %}Privacy | {{ app_name }}{% endblock %}
{% block body_class %}landing{% endblock %}
{% block body %}
<header><div class="wrap">
  <a class="brand" href="/"><span class="brand-mark" aria-hidden="true"></span>{{ app_name }}</a>
  <nav aria-label="Main"><a href="/docs/quickstart">Quickstart</a>{% if session %}<a class="btn" href="/app">Open dashboard</a>{% else %}<a href="/login">Log in</a>{% endif %}</nav>
</div></header>
<main class="wrap prose doc">
  <h1>Privacy</h1>
  <p class="muted">Updated 25 October 2026 · What {{ app_name }} stores, why, and how to delete it.</p>
  <p>{{ app_name }} is operated by Sanchit Pandey under the Orrico Labs name. For privacy questions or requests, contact <a href="mailto:{{ contact_email }}">{{ contact_email }}</a>.</p>

  <h2>What the SDK sends</h2>
  <ul>
    <li>Model name and token counts for each model call.</li>
    <li>Test IDs and which ones failed, plus a code revision ID you choose (for example a git hash).</li>
    <li>Tool names, whether they succeeded, and fingerprints of their arguments and errors. A fingerprint is a keyed hash: it shows two errors were the same without revealing what they said.</li>
    <li>Task names you give each task, short progress notes, and an optional outcome.</li>
  </ul>

  <h2>What the SDK does not automatically send</h2>
  <p>The SDK does not automatically send your prompts, the model's replies, source code, file contents, or model provider API keys. Your agent calls the model provider directly. Do not put secrets or private content in task names, progress notes, test IDs, or other fields you supply: those fields are sent as written.</p>

  <h2>What we store about you</h2>
  <p>We store your email address and a scrypt hash of your password to provide and protect your account. The secret values of API keys, login session tokens, and password-reset tokens are stored as hashes, so those values cannot be read back from the database. We also keep key names, prefixes and usage times, session and reset expiry times, and account creation time. A session cookie keeps you signed in; a short-lived form-security cookie helps protect login and signup forms.</p>
  <p>We also store your workspace name, supervision rules, model prices you configure, and any alert email address or Slack webhook you save. We use these settings to supervise runs, show estimated spend, and deliver the alerts you request. Anyone with access to your workspace settings can update its alert destinations, so treat a Slack webhook as a secret.</p>

  <h2>How long it's kept</h2>
  <p>To improve setup and detection during beta, we measure account and API-key creation, first event receipt, flags, and weekly workspace activity using server records. We store event receipt times, an internal/testing or outside-user workspace classification, and any flag verdicts or missed-loop reports you submit. Feedback records include the submitting account ID and can be updated by workspace members. The operator sees workspace activation and aggregate usage and feedback counts. These records are linked to your workspace; they are not anonymous. No external analytics service or additional tracking cookie is used.</p>
  <p>Run data, associated activity receipt times and feedback, and unexpected server-error records are removed from the active database after {{ retention_days }} days. Error records contain an exception type, route pattern, stack locations, and occurrence times and counts; they exclude exception messages and request contents. Account details and workspace classification stay in the active database until you delete your account.</p>
  <p>Encrypted database backups are retained in GitHub Actions for up to 30 days. Neon recovery snapshots and isolated restored branches can retain older copies until they are deleted. Data removed from the active database can therefore remain in these recovery copies.</p>

  <h2>Deleting your data</h2>
  <p>Settings, then Delete account, removes your workspace, runs, events, API keys, settings, and login from the active database. Historical recovery copies are not changed immediately. Contact us to request help with data in retained backups or restored branches.</p>

  <h2>Who processes it</h2>
  <p>The website runs on Vercel and its active database is hosted by Neon. These providers may process request information, such as IP address and browser details, to deliver and protect the site. The site loads its Inter font from Google Fonts, which also receives a request from your browser. Encrypted database backups are stored in GitHub Actions.</p>
  <p>Run alerts go to the Slack webhook and email address you set; email delivery uses Resend. New server-error alerts go to the site operator's configured Slack webhook and email address. Copies delivered to those destinations are governed by the recipients' and providers' retention settings; deleting your Agent Supra account does not remove those copies.</p>
  <h2>Questions and requests</h2>
  <p>For privacy questions, access or deletion help, or concerns about an alert destination, contact <a href="mailto:{{ contact_email }}">{{ contact_email }}</a>.</p>
</main>
{% endblock %}