What is stored, and how to delete it
Last updated 20 September 2026. This is a small tool run by one person and shared with a handful of testers. It is written plainly because vagueness here would be the problem.
What is collected
Only what the tool exists to show you:
- Your prompts and the agent's replies, verbatim, from sessions on machines where you installed the client.
- Entries your agent writes — findings, decisions, changes, checks and where things stand.
- A hash of your repository's git remote, so tasks group by project. The repository name is sent only if you leave the label on, and you can clear it.
- The name of the tool that wrote each row, such as
claude-code, and the time it was written. - Your email address, from Google sign-in, to identify the account.
What is never collected
Your source code, file contents, tool results and command output are not sent. Anything matching a known secret pattern — tokens, keys, PEM blocks — is stripped on your machine before upload, and only the name of what was stripped travels with the turn, so you can see the scrubber working.
Where it lives
On servers in AWS in Mumbai (ap-south-1), in an encrypted database that is not reachable from the public internet. Backups are kept for seven days. It is not sold, not shared with anyone, and not used to train anything.
Deleting it
From Your data in the dashboard, either of these, immediately and without asking anyone:
- Delete raw turns — removes every stored prompt and response, keeping the reasoning your agent wrote.
- Delete everything — account, tasks, entries, turns and tokens. Nothing is kept.
Deletions take effect at once. Database backups age out within seven days.
Google sign-in
Sign-in uses Google only to prove the email address is yours. The tool reads your email address and nothing else — no Drive, no contacts, no calendar — and stores no Google password or token beyond a session that expires after 12 hours.
Contact
Questions, or a deletion you cannot perform yourself: awasthigautam511@gmail.com.