Privacy Policy

What we collect

Account data (name, email, organization, and role); API keys, which we store only in hashed form; session data; usage and metering records; files you upload to workspaces; content agents produce in your sandboxes; and server logs. Billing records, including payment details, are held by our payment processor, Polar.

How we use it

We use this information to provide, operate, and secure the service; to authenticate you; to run your agents and sandboxes; to meter usage and bill you; to communicate with you about your account and the service; and to troubleshoot and improve reliability. We do not sell your data and do not train models on your content.

Processors

We share data only with service providers that help us operate the service: our payment processor, Polar, acting as merchant of record; cloud infrastructure providers that host our servers; and an email provider for transactional messages. They process data on our behalf and only as needed to provide their services.

Retention

We keep account data, workspace content, and usage records while your account is active. When you delete content or close your account, we delete the associated data within a reasonable period, except where we must keep records (such as billing records) for legal, tax, security, or dispute-resolution purposes. Server logs are kept for a limited period for security and operations.

Security

We isolate customer workloads in sandboxes, store API keys only in hashed form, and restrict access to production systems. No system is perfectly secure, but we work to protect your data and will notify you of a breach affecting it as required by law.

Your rights

You can access, correct, or delete your personal data, and request a copy of it, by emailing hello@semantic.sh. Depending on where you live you may have additional rights under applicable law, and you may contact your local data protection authority.

Cookies

We use a session cookie to keep you signed in and a preference cookie to remember your theme. We do not use advertising or third-party tracking cookies.

Children

The service is not directed to children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us data, contact us and we will delete it.

Changes

We may update this Policy from time to time. We will post the updated Policy with a new date and notify you of material changes.

Contact

Privacy questions or requests: hello@semantic.sh.