Privacy Policy
Last updated: 9 November 2026
This policy explains how Ø ("we") handles your personal data. We're responsible for it (the controller).
What we process, and why
| Data | Why | Legal basis |
|---|---|---|
| E-mail address and password (stored only as a secure hash) | Your account and signing in | Contract |
| Your chats, agent conversations and your agents' settings | Providing Ø to you | Contract |
| Files in your workspace | Letting agents work and keeping your files | Contract |
| Plan, payments and invoices (via Stripe) | Billing | Contract, legal duty (tax records) |
| Usage counts (messages, tasks, costs) | Limits and fair use | Contract, legitimate interest |
| IP address, for a short time | Security, abuse and rate limits | Legitimate interest |
| Page views, without cookies or tracking across sites | Understanding how Ø is used | Legitimate interest |
We don't sell your data, and we don't use it for advertising. We don't use your chats or files to train AI models, and the AI providers we use don't train on them either.
Who processes data for us
- Supabase (database and sign-in), Vercel (hosting the app), Cloudflare (your workspace computer, file storage, bot protection), Anthropic (the Claude AI models), Stripe (payments), Resend (e-mails).
- Each is bound by a data processing agreement. Some are in the United States; transfers are protected by the EU–US Data Privacy Framework and/or the EU's standard contractual clauses.
How long we keep it
- Your account, chats, agents and files: as long as you have an account. When you delete your account, we delete them within 30 days (backups included).
- Invoices and payment records: 7 years (Dutch tax law).
- IP addresses for security: up to 30 days. Page view statistics: aggregated, up to 400 days.
Security
All connections to Ø are encrypted (HTTPS/TLS), and data is encrypted at rest by our providers. Access is limited to what's needed to run Ø. Your workspace runs separated from other people's; links to your workspace screen and previews are private and expire.
Cookies
Ø only uses cookies that are needed to keep you signed in and to keep Ø secure. No advertising or tracking cookies, so we don't need a cookie banner.
Your rights
You can ask to see, correct, export or delete your data, and object to or limit its processing. Most of this you can do yourself in Settings (including deleting your account). For anything else, contact us; we answer within one month. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes
We'll update this policy when Ø changes, and e-mail you about important changes.