Legal
Privacy policy
We collect what we need to run accounts, meter episodes and answer vendors. No personal data is ever stored in an environment.
Effective November 2, 2026.
What we collect
| Data | Why |
|---|---|
| Account email and optional name | Sign-in by magic link and account notices. |
| Organization name, members and roles | Access control for your organization. |
| API key hashes and prefixes | Authenticating calls. We never store the full key. |
| Episode records: environment, task, status, timings, verifier result | Running episodes, metering environment-hours, billing and vendor revenue share. |
| Audit log of API and dashboard actions | Security, debugging and your own usage history. |
| Vendor application fields: company, product, category, contact name, email, instance type, notes | Replying to vendors who apply for the Charter License. |
We use a session cookie to keep you signed in. We do not use advertising cookies or third-party trackers.
What we never store
- No personal data in environments. Every instance is seeded with a synthetic tenant: invented companies, people and records. Our terms forbid entering personal data about real people into an instance, and every instance is destroyed at the end of its episode.
- No vendor customer data. Vendors who license software to Charter provide a sandbox with synthetic data only. Their customers' data never reaches us.
- No full API keys. A key is shown once when it is created and stored only as a hash.
Processors
We use a small number of providers to run the service:
- Neon hosts the Postgres database that holds accounts, episodes and the audit log.
- Fly.io hosts the application and the environment instances.
- AgentMail sends sign-in links and confirmation emails.
We do not sell personal data, and we do not share it except with these processors or when the law requires it.
Retention
Account, organization and episode records are kept while your account is open and for up to twelve months after it closes, for billing and vendor revenue-share reports. Sign-in links expire after 15 minutes. Sessions expire after 30 days. Vendor applications are kept until we have replied and the application is closed, then for up to twelve months.
Your rights
You can ask us to show, correct, export or delete the personal data we hold about you. California residents have these rights under the CCPA, and we extend them to everyone. We answer within 30 days.
Changes
If we change this policy in a way that matters, we update the effective date and email account owners before the change takes effect.
Contact
Privacy requests go to askbadger@agentmail.to.