Privacy Policy

Account information. Your email address; your name and profile picture if you add one or sign in with GitHub; and which sign-in method you used. If you sign in with GitHub we receive the profile details GitHub shares with us (such as your username, email and avatar). We never receive your GitHub password.

Workspace content. What you and your agents put into a workspace: threads, messages and team chat, prompts and agent replies, the commands and tool calls an agent runs and their output, summaries, decisions, shared memory, workflows, requests between agents, and files you attach. For code work we also store the list of files an agent changed, the differences (diffs), and the current text of up to 100 project files from the latest snapshot so teammates can read them in the browser. Your repository is not copied to us in full: your code stays on your computer unless you push it.

Computers and sessions you connect. For each connected computer: a name, its operating system and host name, which coding tools it has installed, when it was last online, and the access token that lets it talk to your workspace. For sessions mirrored from tools such as Claude Code, we store the conversation that is shown in the thread.

Connected apps. If you connect a service such as Linear or Notion, we store the sign-in tokens that service gives us, encrypted, so your agents can act in it for you. You can disconnect at any time, which deletes them.

Billing. Payments are handled by Stripe. We receive and store your Stripe customer and subscription identifiers, your plan, its status and renewal date. We never see or store your full card number.

Technical information. Our servers and providers log requests, including IP address, browser type and the pages or API routes requested, to keep the service running and secure.

Messages you send us. If you email us, we keep the message and our reply.

• To run Coagy: sign you in, show your workspace to the people you share it with, run and relay your agents, and send the notifications you ask for.
• To take payment, manage your plan, and apply the limits of your plan.
• To keep the service safe: prevent abuse, investigate problems, enforce our terms, and keep records of administrative actions (the audit log).
• To support you, and to understand and improve the product, for example by looking at error logs.
• To meet legal obligations and protect our rights.

We do not sell your personal information. We do not show advertising, and we do not track you across other websites. Coagy does not train artificial-intelligence models on your workspace content; we do not operate our own AI models.

Coagy coordinates coding tools that run on your own computers and under your own accounts (for example Claude Code, Codex, Gemini CLI, Cursor or OpenCode). Your prompts and code are sent to those tools’ providers by the tool itself, under your agreement with them and their privacy terms. We are not a party to that and do not control it.

If a teammate shares their computer with the workspace and you choose to use it, your prompt runs on their computer and under their AI account, and they and the workspace can see it. If you use a connected app, the agent acts in that app with your permissions.

• Members of your workspace. Everything in a workspace is visible to its members according to their role (owner, developer or viewer), including their agents. Do not put in a workspace anything you do not want your teammates to see.
• Our service providers, who process data for us under contract: see the subprocessor list.
• Services you connect, such as the AI tools you run and the apps you link, when you or your agents use them.
• Authorities and others where required: to comply with the law or a valid legal request, to protect safety and rights, or in a merger, acquisition or sale of the business, in which case we will tell you.

We keep your information while your account or workspace exists. When an owner deletes a workspace, its threads, messages, runs, files and settings are deleted from our systems; minimal records of administrative actions and billing records may be kept longer where we need them for security, accounting or legal reasons. When you ask us to delete your account, we delete or anonymise your personal information, except where the law lets or requires us to keep it. Backups and logs are deleted on a rolling schedule, so removal from them can take a limited additional time.

We use encryption in transit, encrypt connected-app tokens and provider keys at rest, and use database rules that limit each person to their own workspaces. No service can promise perfect security. Read our security page for what we do and do not claim, including that agent approvals are not a security sandbox.

Coagy’s database and file storage are hosted in the United States (Amazon Web Services us-east-1, through Supabase), and our website is served worldwide through Cloudflare. If you use Coagy from outside the United States, your information is transferred to and processed in the United States and other countries that may have different data-protection laws. Where required, we rely on appropriate safeguards such as standard contractual clauses with our providers.

Depending on where you live (for example the European Economic Area, the United Kingdom, California and other US states), you may have the right to access, correct, delete or export your personal information, to object to or restrict some processing, to withdraw consent, and not to be discriminated against for using these rights. In the EEA and UK our legal bases are: performing our contract with you (providing Coagy), our legitimate interests (security, support and improving the product), your consent where we ask for it (for example connecting an app), and legal obligations.

To use a right, email hello@coagy.com from the address on your account. We may need to verify it is you. You can also delete threads, disconnect apps and delete a workspace yourself in the product. If you are unhappy with our answer, you can complain to your data-protection authority. We do not sell or “share” personal information for cross-context advertising as those terms are defined in California law.

We may collect publicly available professional information, such as a public profile or a public post about a developer tool, in order to tell a small number of people about Coagy by email or message. If you got a message from us and want us to stop, or to delete what we hold about you, tell us at the address above and we will do so promptly.

Coagy is not directed to children, and you must be at least 16 years old to use it. If you believe a child has given us personal information, contact us and we will delete it.

We use only the cookies and browser storage Coagy needs to work; there are no advertising or analytics cookies. See the Cookie Notice.

We may update this policy. When a change is significant we will tell you, for example by email or a notice in the product, before it applies. The date at the top shows the latest version.

Coagy (“we”, “us”). Email hello@coagy.com. Business customers who need a data processing agreement can ask us for one.