Privacy Policy

The short version

Your agent runs on your own devices. The work it does — the pages it reads, the files it touches, the messages it drafts — stays on your machines. Our servers handle accounts, billing, and coordination only, and traffic between your devices is end-to-end encrypted so we cannot read it.

What we collect

• Account data — your email address and, if you sign in with Google, your name and profile basics from Google. Waitlist signups store the email you submit.
• Billing data — handled by Stripe. We store your Stripe customer ID, subscription tier and status. We never see or store card numbers.
• Node presence — when a node you install heartbeats, we store its device name, platform, capability tags, software version, and last-seen time so your dashboard can show it. We store a SHA-256 hash of your mesh auth key, never the key itself.
• Usage metering — counts of actions your nodes perform (numbers only, per day), used to enforce tier quotas. Not the content of those actions.

What we never collect

The content your agent works on: relayed traffic between your phone and your nodes is encrypted end-to-end with a key that only your devices hold. We cannot decrypt it, and we do not log it. Your logins, cookies, and files stay on your machines.

Cookies

We use session cookies required for sign-in (via Auth.js). No advertising trackers or third-party analytics cookies.

Processors we rely on

Vercel (hosting), Neon (database), Stripe (payments), Resend (transactional email), Cloudflare (encrypted relay), and Google (optional sign-in). Each receives only what its function requires.

Retention and deletion

Account and billing records are kept while your account is active. Email support@anchortrails.com to delete your account and associated data; we remove it within 30 days except where billing law requires longer retention of invoices.

Contact

Privacy questions: support@anchortrails.com. We will update this page if our practices change, with a new "last updated" date.