Privacy.

What we hold

• Account data — your email, organisation name and plan.
• End-user credentials — sealed, per user, per connector. We cannot read them.
• Grants — who authorised what, with which limits and expiry.
• Ledger entries — the binding invoked, arguments, upstream status and outcome.

What we do not do

• We do not sell data, and there are no third-party advertising trackers on this site.
• We do not read stored credential values. There is no mechanism that would let us.
• We do not train models on your ledger or your users' content.

Retention

Ledger retention follows your plan — seven days on Free, ninety on Builder, a year on Studio. Deleting a grant removes the credential immediately; ledger entries about it persist for the retention window, because an audit trail you can delete is not an audit trail.

The scanner on the homepage

The live scanner runs entirely in your browser. The text you paste into it is never sent to us or to anyone else.