What we collect
- Account information — name, email address, and password hash when you register. If you sign in via Google or GitHub, we receive your name and email from the provider.
- API keys — Anthropic API keys you provide are encrypted at rest and used solely to run AI agents on your behalf.
- Conversation data — messages you send to agents and their responses are stored to enable session continuity and chat history.
- Usage data — basic request logs (timestamps, endpoints) for operational monitoring. No analytics trackers or third-party scripts.
How we use it
- To authenticate you and provide the service.
- To run AI agents in isolated Docker containers using your API keys.
- To maintain your chat history and workspace files.
- To send transactional emails (password reset, invites) if configured.
What we don't do
- We don't sell, share, or monetize your data.
- We don't use your conversations to train AI models.
- We don't use third-party analytics, advertising, or tracking.
- We don't access your API keys except to execute agent tasks you initiate.
Data storage & security
- All data is stored on infrastructure we operate (Hetzner, Helsinki, EU).
- API keys and secrets are encrypted with AES-256 at rest.
- Agent containers are isolated and ephemeral — destroyed after sessions end.
- Persistent session data is stored in Docker volumes scoped to your account.
- All connections are encrypted via TLS (HTTPS).
Third-party services
Anthropic
Your API key is sent to Anthropic's API to run Claude agents. Subject to Anthropic's privacy policy.
Google / GitHub
If you use OAuth sign-in, authentication is handled by the provider. We only receive your name and email.
Slack
If you connect Slack, messages sent to the bot are processed by our server. We store the bot token (encrypted) to send responses.
Resend
Used for transactional emails only (if configured).
Data retention
- Account data is retained while your account is active.
- Chat history is retained until you delete the chat or your account.
- You can delete your account and all associated data by contacting the admin.
Your rights
You can request access to, correction of, or deletion of your personal data at any time by contacting us at privacy@vonz.io.
Contact
Questions about this policy? Email privacy@vonz.io.