DRAFT — needs legal review. This text describes what the software does today; it is not yet a reviewed legal document.
Privacy policy
What we store
- Account: your email address, and the GitHub account link if you sign in with GitHub.
- Your machines and devices: host labels, device names, public keys, when each was last seen, and each device's push subscription (which lets us send it notifications).
- Session metadata we can read: the program's name, its state (idle, working, blocked, done, error), the kind of prompt, progress, the record path, timestamps and exit code.
- Content we cannot read: message text, titles, commands and working directories are stored only as ciphertext sealed to your paired devices.
- Your settings: notification preferences (time zone, quiet hours, per-state and per-app switches).
- Operational records: a log of notification decisions (without message text) and an audit log of response attempts (which device, which prompt, and the outcome).
- Billing: your plan, and the customer and subscription identifiers Stripe gives us. Card details go to Stripe and never reach us.
How long
- State-change history: 24 hours on the Free plan, 30 days on Pro.
- Short-lived rows (expired login codes, pairing requests, notification decision logs): removed within about a week.
- Everything else until you delete it or delete your account.
Deleting your data
Settings → Delete account cancels any subscription and deletes all of the data above, immediately. Stripe may keep billing records it is required by law to keep. [Legal review: retention of backups and Stripe records.]
Who else handles it
- Fly.io hosts the service and its database.
- Stripe processes payments.
- Resend delivers sign-in emails.
- Browser push services (Google, Apple, Mozilla, Microsoft) relay notifications. They see that a push happened, when, and its size, not its content.
We do not sell your data or use it for advertising. We do not run analytics or third-party trackers on this site. [Legal review: confirm before launch.]
Cookies
One session cookie to keep you signed in. No tracking cookies.
Contact
privacy@beckoncli.com