Privacy Policy

1. Scope and deployment choices

Warpdrive can connect to hosted services or to a Gateway operated by you or your Organization. Information stored only on a self-hosted Gateway remains under that Gateway operator's control. Information is sent to Warpdrive-hosted services or a connected provider when the feature you choose requires it.

An Organization may administer your account, Workspaces, Apps, or Gateways. In that case, the Organization's privacy practices also apply to information it controls.

2. Information we handle

• Account and profile information: username, email address, phone number, display name, avatar, preferences, Organization membership, Roles, and Entitlements.
• Authentication and security information: password hashes, sessions, MFA and trusted-device metadata, sign-in time, IP address, user agent, device type, success or failure status, and coarse region.
• Connection and credential information: provider and Gateway addresses, account identifiers, OAuth tokens, API credentials, and related settings that you or your Organization choose to save for connected services.
• User content: Conversations, prompts, AI responses, Workspace files, uploads, terminal and orchestration activity, Apps, Previews, comments, reviews, and support messages.
• Gateway and device information: Gateway addresses and identifiers, Instance and pairing identifiers, platform and app version, diagnostics, and device capability settings.
• Purchase information: plan, subscription status, product and transaction identifiers, usage, credits, invoices, and payout status. Apple, Google, and payment providers process payment credentials under their own policies.
• Product telemetry: feature and route activity, timestamps, dwell time, client platform, locale, selected product resource identifiers, prompt length, and outcome metadata. Product telemetry is not designed to store raw prompt text.

3. Device permissions

Warpdrive asks for a device permission only when a feature needs it. Camera and photo access can scan a Gateway code, update an avatar, or provide content to an Instance. Microphone access supports speech input; the operating system or its speech service may process audio, and the resulting transcript can become Conversation content. Bluetooth and local-network access can discover selected devices and connect to a Gateway.

You can change operating-system permissions and per-App device access in Settings. Some features will stop working when permission is withdrawn.

4. Why we use information

• Provide, personalize, synchronize, secure, and troubleshoot Warpdrive.
• Authenticate users and enforce account, Organization, and Gateway access.
• Run requested AI, App, billing, communication, and support workflows.
• Send transactional notices and optional product announcements according to your notification choices. Announcement emails include an unsubscribe path.
• Prevent abuse, investigate incidents, and maintain reliable services.
• Measure product performance and improve features.
• Comply with legal obligations and enforce the Terms of Service.

5. When information is shared

We share information only as needed with:

• infrastructure, communications, security, support, billing, and marketplace service providers acting on Warpdrive's behalf;
• Apple, Google, Stripe, and other transaction providers for purchases, subscription verification, customer portals, refunds, and creator payouts;
• AI providers, custom HTTPS endpoints, Apps, and integrations that you or your Organization choose to connect;
• your Organization or Gateway operator when it administers the service;
• authorities or other parties when required by law or necessary to protect safety;
• a successor in a merger, financing, reorganization, or sale, subject to this policy.

Warpdrive does not sell personal information or use personal information for cross-context behavioral advertising.

6. Retention and deletion

Retention depends on the type of information, the deployment you use, and security, contractual, and legal requirements. First-party product and login telemetry is ordinarily retained for up to 180 days. Historical authentication-session records may be retained while needed for account security, incident response, and legal obligations; the hosted service does not currently guarantee one automated expiration interval for those records. Other content remains until it is deleted, the related Workspace, App, Gateway, or account is removed, or it is no longer needed.

Read the full retention and deletion guide to request account or data deletion and understand self-hosted data.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, export, restrict, object to, or delete personal information. You may update available profile and permission settings in the app. For other requests, email privacy@warpdrive.dev. We may verify your identity before fulfilling a request.

8. Security

Warpdrive uses administrative, technical, and organizational safeguards appropriate to the information and deployment. No transmission or storage system is completely secure. Protect your account, review connected providers and Apps, and use HTTPS or a secure tunnel when connecting to a Gateway over an untrusted network.

9. Children

Warpdrive is not directed to children under 13. If you believe a child provided personal information without appropriate permission, contact us so the information can be reviewed and removed where required.

10. Changes and contact

We may update this policy as the service or law changes. The updated date will identify the current version. Material changes will be communicated through an appropriate product or account notice.