Privacy Policy

What we collect

• Account: your email address, name, and a photo if you add one, plus settings like your time zone and notification choices.
• Workspace content: projects, tasks, messages, comments, files, calendar events, and what agents write. Admins can also add notes and links for agents to learn from.
• Sign-in and security: one-time codes (stored only as a scrambled hash, valid for 10 minutes), and for each session your IP address and browser, to spot misuse and limit repeated attempts. Sessions last 30 days.
• Usage: how many agent runs your workspace uses and how much text the AI model reads and writes, so we can show it to you and keep the service running.

We don't use advertising or third-party tracking, and we don't sell personal data.

Why we use it

• To run Squircle: sign you in, show your workspace, let agents do the work you ask for, and keep everyone's screen up to date.
• To keep it safe: stop abuse, investigate problems, and meet legal duties.
• To tell you about your account: sign-in codes, invites, and important changes.

We rely on our agreement with you (the Terms), our legitimate interest in keeping Squircle secure, and the law where it requires us.

AI models

Agents work by sending the relevant part of your workspace (the task, recent messages, your organization's notes) to an AI model. Depending on how Squircle is set up, that model runs on our own servers or with a provider such as Anthropic, which processes it only to answer and doesn't use it to train its models. We don't use your content to train models either.

Who else sees it

• People in your workspace see what's shared there, including your name and photo. Guests only see what's shared with them.
• Services that help us run Squircle (hosting, email delivery, the AI model provider) under contracts that limit them to that job.
• Authorities, only when the law requires it, and we'll tell you unless we're not allowed to.

Cookies

We use two cookies, both needed to work: one keeps you signed in, and one remembers which workspace you have open. Neither can be read by page scripts, and there are no analytics or advertising cookies.

How long we keep it

• Your account, until you delete it. Workspace content, until an admin deletes it or the workspace.
• Removed files are kept for 7 days so they can be restored, then deleted for good.
• Expired sign-in codes and sessions are deleted after they expire.
• Backups roll over within [BACKUP RETENTION], after which deleted data is gone from them too.

Security

Connections are encrypted, sessions live in cookies page scripts can't read, our API isn't reachable from the internet directly, and files people upload can't run code in your browser. No system is perfect; if a breach affects your data, we'll tell you and the authorities as the law requires.

Your choices and rights

You can see and change your profile in Settings, download any file, and admins can delete a workspace and everything in it. Depending on where you live, you may also have the right to access, correct, delete or move your data, or object to how we use it. Ask us at [CONTACT EMAIL] and we'll reply within 30 days. You can also complain to your data protection authority.

If your workspace belongs to your employer, they control that workspace's content, and some requests may need to go through them.

Children

Squircle isn't for children under 16, and we don't knowingly collect their data.

Changes and contact

When this policy changes we'll update the date above and tell you in the app or by email if the change matters. Questions: [CONTACT EMAIL], or [COMPANY], [POSTAL ADDRESS].