Privacy Policy

Last updated: 23 August 2026

What this covers

This policy describes how Conveyor.AI handles information when you use the hosted service, this website, or the dashboard. Conveyor.AI is also self-hostable: when you run it on your own infrastructure, your data stays on your machines and never reaches us at all.

What we collect

Only what the service needs in order to work:

• Sign-in information. An email address and the identifier your sign-in provider gives us, so we know who you are between visits.
• Work content. The issues, comments, repository contents and configuration you point the service at. This is the material the pipeline operates on — it exists so agents can read your code and write changes back.
• Operational records. Run logs, timing, errors and similar technical output produced while the service does its work, so you and we can see what happened and diagnose failures.

What we don't collect

We don't ask for and don't store personal information beyond what sign-in requires. No payment card numbers, no government identifiers, no addresses or phone numbers you haven't chosen to give us, no advertising or cross-site tracking identifiers, and no location data. This website sets no advertising or analytics cookies.

How we use it

To provide the service, and nothing else — running your pipelines, showing you their output, keeping your account working, notifying you when a run needs your answer, and keeping the system secure and reliable. We do not use your content to build advertising profiles, and we do not use it to train machine learning models.

We don't sell or share your data

We do not sell your data, rent it, or share it with anyone for their own purposes.

Delivering the service does mean your content passes through infrastructure we rely on, strictly to do the job you asked for. Depending on how your project is configured, that can include the source-code host you connect (for example GitHub), the compute provider running your containers, the AI model provider whose agents perform the work, your issue tracker if you enable syncing, and a messaging provider if you turn on notifications. These providers process your content only to perform that function. We don't send your data anywhere your configuration doesn't require.

How long we keep it

Work content and operational records are retained while your account is active, so the history stays useful to you. You can delete issues, projects and their associated records at any time. When you close your account, we delete or anonymise what remains, except where we're required to keep something to comply with the law.

Security

Access is authenticated, credentials and tokens are held as secrets rather than in plain configuration, and each unit of work runs in its own isolated container so one project's data isn't visible to another's. No system is perfectly secure, but we treat your code and your credentials as the sensitive material they are.

Your choices

• Access, correct, export or delete your data — ask us, or do it from the dashboard where the controls exist.
• Disconnect an integration at any time; the service stops sending data to it.
• Run Conveyor.AI yourself, on your own hardware, if you'd rather we never hold your data in the first place.

Children

Conveyor.AI is a tool for software teams and isn't directed at children. We don't knowingly collect information from anyone under 16.

Changes to this policy

If this policy changes in a way that materially affects you, we'll update the date at the top of this page and tell you through the service before the change takes effect.

Contact

Questions about this policy, or about the data we hold, can be sent to admin@conveyorai.org.