Privacy policy

What we collect

Account information: the email address and profile details supplied by Google when you sign in, which is the only sign-in method. Workspace content: the chats, saved outputs, prompts, agents, projects, and files you create or upload. Provider credentials: the API keys a workspace owner connects, stored encrypted. Usage records: per-request token counts, model, provider, and estimated cost.

Usage records do not include the text of your prompts or the model’s replies.

What we do with it

Account information identifies you and controls which workspaces you can reach. Workspace content is stored so the product can show it back to you and so shared context works for your team. Provider credentials are decrypted server-side only to make the provider calls you ask for. Usage records power the usage and budget reporting in the product.

We do not sell your data, and we do not use your workspace content to train models.

Who else sees it

When you send a message to a model, the content of that request goes to the provider you selected, under your own account with that provider. That provider’s privacy and retention terms govern what happens to it on their side, and those terms are between you and them.

Infrastructure providers process data on our behalf in order to host the service. Other members of your workspace can see workspace-shared content; private chats are visible only to their author.

Your choices

You can delete chats, outputs, files, and agents from within the product. A workspace owner can remove a provider key at any time, which immediately stops it being usable. You can ask for your account and its workspace data to be deleted.

Depending on where you live you may have additional rights over your personal data, including access, correction, export, and erasure.

Changes

If this policy changes in a way that materially affects what is collected or who receives it, we will say so rather than quietly amending the page.