Privacy Policy

Last updated: 6 July 2026. Plain words, because the data flow here is unusual and worth understanding.

The short version

Your code and your Anthropic API key stay on your machine. What we store is your account email, the project names/paths you add, and the results your own agent streams back (scan findings and task run logs).

What we store

Account: your email address and a hashed password (in our self-hosted auth database).
Projects: the slug, name, folder path, and optional agent-host label you enter.
Tasks & run output: the findings and logs your agent streams back when you trigger a scan or task. These can contain excerpts of your code if Claude quotes it — trigger runs only on projects you're comfortable having summarized on your dashboard.
Agent pairing tokens: stored only as salted hashes; the raw token is shown to you once.

What we never receive

Your Anthropic API key — the install command is assembled in your browser; the key is never transmitted to our servers.
Your repository contents — the agent is outbound-only and sends only run results, never your file tree.
Payment card numbers (when billing starts, they will go directly to the payment processor).

Where processing happens

Claude runs on your machine via your Anthropic account, so the content of your projects is processed under Anthropic's privacy terms, not ours. Our servers (hosted in the EU) store only what's listed above.

Sharing, analytics, cookies

We don't sell or share your data, run no third-party analytics, and use no tracking cookies. The only browser storage is your sign-in session and small UI preferences (localStorage).

Retention & deletion

Deleting a project deletes its tasks. Backups are kept up to 90 days, then expire. Email tzahi.dagan@gmail.com to delete your account and everything attached to it.

Contact

tzahi.dagan@gmail.com