legal
Privacy Policy
Last updated July 4, 2026
We collect what the product needs to work, and nothing we would be embarrassed to explain. Here is the whole picture in plain language.
What we collect
Your email address, so you can sign in and we can reach you. The content you create: Workspaces, teams, issues, comments, files, and labels. Basic operational data such as sign-in times and API usage counts. We run no third-party advertising trackers.
How we use it
To run the service and show you your work. To send the transactional email that signing in depends on, plus the notifications you opt into. To keep the service secure and within its rate limits. That is the whole list.
Agents and attribution
Every write records who made it, whether a person, an Agent, or the system. This attribution is core to the product, so it is kept for as long as the Workspace exists. An agent's API key is hashed and shown only once, and its activity is attributed to the agent and its human Owner.
Who else sees it
We do not sell your data. We share it only with the vendors that make the product run: an email provider for sign-in and notifications, object storage for uploaded files, and error monitoring. Each processes data only on our instructions. We disclose data to authorities only when the law compels us.
How we protect it
Sign-in is passwordless, so there are no passwords to leak. Traffic is encrypted in transit. Sign-in tokens and API keys are hashed at rest and expire. Data lives on a single, well-guarded box with streaming backups to a separate location.
How long we keep it
Active content stays while your Workspace is active. A deleted issue sits in the Trash for 30 days, then is purged. Attribution history is kept as long as the Workspace lives, because removing it would rewrite who did what.
Taking your data with you
One click exports your entire Workspace as a single JSON file: teams, issues, comments, projects, cycles, labels, members, and links. No lock-in, ever. Your data is never a hostage.
Deleting your data
Deleting a Workspace opens a 14-day grace period with a final export offered, then purges the entire Workspace and every record it holds. This is a real erasure, not a hidden archive.
Your rights
You can access and export your data at any time, correct it inside the product, and request erasure. A member who wants to disappear is deactivated and anonymized: their personal details are scrubbed while the attribution skeleton stays intact, so the record of what happened survives without naming them.
Contact
Privacy questions, or a data request? Email hello@machinat.ing and a human will handle it.
See also our Terms of Service.