How your data is handled
Where things are stored, what is never returned, and what this page does not claim.
This describes what the product does. It is not a legal document and it does not replace one — the privacy notice, the data processing agreement and the subprocessor list are the authoritative texts, and where this page and those disagree, those are right.
Where things live
- Boards, items and runs
- Inside one workspace, never visible from another.
- Provider credentials
- Against your account, encrypted at rest, never copied into a workspace record and never returned by any API.
- Files
- In a private store with row-level access rules, reached through signed URLs rather than public addresses.
- Session
- A cookie-backed session refreshed server-side. Nothing security-relevant is read from browser storage, because browser storage is a value the browser can edit.
What is never returned
- A provider secret, in any API response, including the developer API — there is no scope that could ask for one.
- A developer key's secret after the moment it was issued.
- Connector secrets in a run trace. They are redacted before the trace is stored, not before it is displayed.
- Whether a workspace exists, to a key that cannot read it.