HOSTED WORKSPACE · SEPTEMBER 8, 2026

Your work stays yours.

This notice describes the account workspace and its connected runner. The local CLI can be used separately.

Account and session data

We store your email address, a password hash, verification status, project records and account settings. Essential session and request-verification cookies support sign-in and protect account actions. The workspace includes no advertising or behavioural analytics scripts.

Checks and source

A pasted description and diff are sent to this service for the check. A public PR check fetches its description and diff from GitHub. Submitted source and results are private to your account. No model inference provider receives the input in this release. Completed results include changed source lines and citations; queued inputs are discarded when the job finishes.

Customer-run journeys

The portal stores the configuration you approve. The optional connector runs in your own environment. Publication is explicit and only happens when you run the connector with --publish. It then sends the approved contract id and its SHA-256 hash, the reported source revision, journey names, boolean outcomes, step counts, bounded failure categories and the configured deployment observation. It does not upload screenshots, passwords, request bodies, URLs visited or console logs. Review your journey names and configuration for sensitive information before approving or publishing.

Retention and deletion

Run records are removed after 30 days by the worker's daily retention task. Approved expectation versions remain until you delete their project or your account. Unconfirmed accounts are removed after seven days. Project tokens expire after 30 days and can be revoked earlier. You can export account data and delete your account in Account settings.

Deletion removes active records. Backup copies and any provider-held billing records are separate.

Private pilot for invited testers. Operator: Hung Huynh, kibahung19@gmail.com. Hosting and PostgreSQL: Railway. HTTPS edge: Cloudflare. Transactional email: Resend; replies go to the support inbox. Account data remains until deletion; run records are pruned after 30 days. Provider logging and email retention follow their policies. Scheduled database backups and a recovery commitment are not yet configured for this pilot. Do not submit production secrets or irreplaceable data.

Payments

When billing is configured, Stripe hosts checkout and stores payment details. The workspace stores provider customer and subscription identifiers and access status, not card numbers. Free pilot access never starts a paid subscription automatically.

Operational records and contact

Rate limiting uses keyed fingerprints of request addresses and account identifiers; those counters expire with their window. Server logs record request paths, status codes, timestamps and error identifiers, never submitted text, passwords or tokens, and are kept under the operator’s configured retention policy, disclosed in the deployment notice. Expired sessions are cleared by the same daily retention task. Hosting and email providers may keep delivery and request records under their own policies. Contact kibahung19@gmail.com about privacy or account access. Do not include credentials in a support email.