Privacy Policy

The short version: your workspace data lives on your own dedicated server in the EU. We can administer that server but we don't read your content. We keep the minimum account data needed to bill you and run the service.

1. What we store about you

• Account: email, password hash, email-verification state.
• Instances: name, plan, server ID/IP, health and job history, the agent roster you chose (without LLM API keys — those are moved to your instance at provision time and removed from our systems).
• Billing: handled by Stripe; we store only Stripe customer/subscription identifiers, never card details.

2. Where your workspace data lives

Each instance is a dedicated server (Hetzner, Germany/EU). Messages, files, and agent data stay on that server's database and disk. Nightly database backups are stored encrypted-in-transit on our EU control plane, retained for 7 days (last 7 copies), and deleted within 30 days of instance termination.

3. Administrative access — read this

Our control plane holds an SSH key to your instance's server. We use it exclusively for operations you request or that the service requires: provisioning, upgrades, restarts, health-check recovery, and backups. We do not read workspace content. Every administrative action is initiated by the console's job system and logged.

4. Subprocessors

• Hetzner Online GmbH (Germany) — servers
• Cloudflare — DNS
• Stripe — payments
• Resend — transactional email
• Your selected LLM provider (or FreeLLMAPI gateway) — agent model calls; message content in agent conversations is sent to the model provider to generate replies

5. Your rights

Email legal@circlechat.co to access, export, or delete your data. Destroying an instance from the console deletes its server immediately and its backups within 30 days; deleting your account removes our account records. EU/EEA users: a DPA is available on request.

6. Cookies

One session cookie for sign-in. No analytics, no tracking, no third-party cookies on the console.