What we store.What we do not.

The short version

Company Agents runs on your machine. The app calls your own AI provider API keys directly, reads files you point it at, and stores its state in a local database. None of that touches our servers.

We do run a small cloud service for account state, subscription billing, optional cross-device sync, and the public template marketplace. That cloud service holds your email address, a password hash, and pointers to the subscription tier you paid for. It does not hold your prompts, your code, your files, or your API keys.

What stays on your machine

• Your workspace files and source code
• The API keys you configure for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw, OpenCode, Hermes, or Pi
• Agent memory, audit logs, and workflow run history, unless you explicitly turn on cloud backup
• The conversation history with your Executive Assistant
• Secrets you pass to integrations like Stripe or HubSpot

What the cloud service sees

If you create a paid account on our hosted plane, we store:

• Your email address and a password hash
• Your subscription tier and billing status
• Basic device identifiers so cross-device sync works
• Usage telemetry at the event level (app opened, company created, workflow run started, escalation raised). No prompts, no outputs, no file contents.

Cloud sync is opt-in

When you turn on cloud sync, the app encrypts your workspace metadata with a key derived from your account password and uploads it to our object store. We cannot read it. If you lose the password, we cannot recover the synced data either.

Third parties we use

• Payment processing, to handle subscriptions
• Transactional email, to send account and billing notifications
• Hosting and CDN for the marketing site and the optional cloud control plane
• Error tracking for the desktop app (opt out in Settings)

We do not sell data to advertisers, train models on your content, or share your account information with any marketing partner.

Your rights

You can export every piece of data we hold about you, delete it, or pause it, from the Account page inside the app. Account deletion is immediate and irreversible.

Data location

The cloud control plane runs in the United States by default. Business and Enterprise plans can request EU-only data residency.

Children

Company Agents is not directed at children under 16. We do not knowingly collect information from anyone under 16.

Changes to this policy

When we make a material change we will post a note in the changelog and update the "Last updated" date at the top of this page.