Account Information: Email address and authentication tokens when you sign in via GitHub, your organisation's OIDC provider where your deployment is configured for one, or email.
Usage Data: Information about how you use the app, including skill executions and feature interactions.
Device Information: Device type, operating system, and app version for troubleshooting and analytics.
Chat Conversations: Messages exchanged with the AI agent chat, including conversation history and context used for memory features (Based Mode).
Workflow Data: Workflow definitions, execution states, and step results for durable multi-step operations (Based Mode).
Webhook Data: Inbound webhook payloads and delivery status when you configure workflows to receive external events (Based Mode).
Agent Memory: Extracted entities, preferences, and contextual summaries derived from your conversations to personalize the AI agent experience (Based Mode).
Secrets & API Keys: API keys and credentials you store in the Secrets vault for use during skill executions. These are encrypted at rest and only decrypted during authorized skill execution.
2. HOW WE USE YOUR INFORMATION
We use your information to:
Provide and maintain the clanker.engineer service
Process skill executions and manage your account
Track usage for billing purposes
Improve our services and develop new features
Communicate with you about updates and support
Power the AI agent chat with conversation context and memory
Deliver workflow results and notifications
Manage workflow state persistence for durable operations
Securely store and retrieve your API keys and secrets during skill executions
3. DATA STORAGE AND SECURITY
The application runs on virtual servers provided by Hetzner in Helsinki, Finland (European Union). Your account, workspaces, conversations and agent memory are stored in a Neon PostgreSQL database hosted on AWS in US East (Ohio). Files and artifacts you upload, or that your agents produce, are stored in Cloudflare R2.
Because the application servers are in the European Union and the database is in the United States, your data is transferred between those jurisdictions in the course of normal operation.
We implement industry-standard security measures to protect your information from unauthorized access, alteration, or disclosure. Secrets you place in the vault are encrypted with a key held in a separate key store — see section 8.
4. THIRD-PARTY SERVICES AND SUB-PROCESSORS
Operating the product means sharing some of your data with the providers below. We list them by name, and say what each one receives.
Anthropic and OpenAI: model inference. Your prompts, conversation history and the context an agent gathers are sent to whichever provider serves your request, including when you use your own key.
Cloudflare: serves the website and the API edge, runs the marketplace, workspace and sandbox Workers, stores files in R2, and proxies model calls through AI Gateway.
Neon: the PostgreSQL database described in section 3.
Hetzner: the virtual servers the application runs on.
E2B: sandboxed execution. Code, files and commands an agent runs on your behalf are sent to the sandbox.
Upstash: Redis, used for agent memory and caching.
Stripe: payment processing. Card details are handled by Stripe and never reach our servers.
GitHub: sign-in, and — if you connect it — access to the repositories you authorize.
Nango: brokers the OAuth authorizations for connectors you choose to connect.
Inngest: schedules and runs durable background workflows.
Meta (WhatsApp): only if you connect the WhatsApp channel, in which case messages on that channel pass through WhatsApp.
If you self-host, this list describes the hosted product only; a self-hosted deployment uses whichever providers you configure.
5. DATA RETENTION
We retain your account information as long as your account is active. Execution logs and artifacts are stored permanently. Conversation history and security events older than 90 days are automatically cleaned up. Agent memory data persists until you delete your account or clear your memory. You may request deletion of your data at any time.
6. YOUR RIGHTS
You have the right to:
Access your personal data
Request correction of inaccurate data
Request deletion of your data
Opt out of marketing communications
7. BASED MODE DATA
Based Mode subscribers generate additional data through advanced features:
Conversations: Chat messages are stored to maintain context and enable the memory system. Conversations older than 90 days are automatically deleted.
Agent Memory: The system extracts entities, relationships, and preferences from your conversations to personalize future interactions. You can view and delete your memory data at any time through the app.
Workflows: Workflow execution state is stored in PostgreSQL for durability. Completed workflow data is retained for your execution history.
Notifications: Notification content and delivery status are retained to provide result delivery from your workflows.
8. SECRETS VAULT DATA
The Secrets vault allows you to store API keys and sensitive credentials for use during skill executions:
Encryption: All secrets are encrypted at rest using industry-standard encryption. Secret values are only decrypted during authorized skill execution.
Access: Your secrets are accessible only to your account. Skills reference secrets by name and never expose raw values in logs or outputs.
Deletion: You can delete individual secrets at any time through the app. All secrets are permanently removed when you delete your account.
Per-Skill Secrets: Some skills may store skill-specific secrets separately. These follow the same encryption and access controls.
9. CHILDREN'S PRIVACY
clanker.engineer is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
10. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.
11. CONTACT US
If you have questions about this Privacy Policy, please contact us at: info@clankerlabs.com