Privacy Policy
We built Clux to run your code, not to collect it. This policy covers what we store to give you a working cloud workspace, and what we never do with it.
Who we are
Clux is a cloud workspace for running AI coding agents. It is operated by [Company legal name], [registered address] ("Clux", "we", "us"). We are the controller of the personal data described in this policy.
This policy explains what we collect when you use the Clux website, apps and workspaces (the "Service"), why we collect it, and the choices you have.
What we collect
Account data. Your name, email address, avatar and the username of the Git provider you sign in with.
Workspace content. Repositories you connect, files in your workspaces, terminal input and output, agent session transcripts, skills, hooks, MCP and plugin configuration. We store this so your workspace is there when you come back.
Keys and secrets. Model provider keys and environment variables you add. They are encrypted at rest and only decrypted inside your workspace or when a session calls the provider you chose.
Usage and technical data. Compute and storage time, workspace size, IP address, browser and device type, and error logs. We use this to run, bill and secure the Service.
Billing data. Payments are handled by our payment processor. We receive the billing name, country and the last four digits of the card, never the full card number.
How we use it
- To create and run your workspaces, sessions, terminals and ports.
- To send your prompts and the code context you give an agent to the model provider you configured.
- To keep the Service secure, prevent abuse and investigate incidents.
- To bill usage and send you service messages, like a workspace running out of disk.
- To improve the product using aggregated usage data.
We do not use your code, files or session transcripts to train AI models, and we do not sell personal data.
Model providers and your keys
Clux does not provide language models. When you add a key, your sessions send prompts and code context directly to that provider under your own account with them. What the provider does with that data is governed by your agreement with the provider, so please review their terms and data settings.
Public ports
Ports are private by default. If you make a port public, anyone with its link can open whatever is running on it until you make it private again. Do not expose personal data or secrets through a public port.
Who we share data with
We share data only with service providers that help us run Clux, under contracts that limit their use of it:
- Cloud infrastructure: [hosting provider]
- Payments: [payment processor]
- Email delivery: [email provider]
- Error monitoring: [monitoring provider]
We may also disclose data when the law requires it, to protect people from harm, or as part of a merger or acquisition, in which case this policy continues to apply.
How long we keep it
We keep account data while your account is open. When you delete a project, its workspace and files are deleted within [30] days. Session transcripts are kept until you delete them or your account. Logs are kept for up to [90] days. Backups are overwritten on a rolling basis within [35] days.
Security
Every project runs on its own isolated machine. Data is encrypted in transit and at rest, secrets are masked in the interface, and access by our staff is limited, logged and only used to support you or keep the Service safe. No system is perfectly secure, so please tell us right away if you think your account has been compromised.
Your rights
Depending on where you live, you can ask to access, correct, export or delete your personal data, and object to or restrict some processing. You can delete projects and your account from Settings at any time. For anything else, email [privacy@yourdomain.com]. You can also complain to your local data protection authority.
International transfers
We and our providers may process data outside your country, including in [regions]. Where required, we use safeguards such as the EU Standard Contractual Clauses.
Cookies
We use cookies that are needed to keep you signed in and to protect the Service. We do not use advertising cookies or cross-site trackers.
Children
Clux is not meant for anyone under 16, and we do not knowingly collect their data.
Changes to this policy
If we make material changes, we will tell you by email or in the app before they take effect. The date at the top shows the latest version.
Contact
Questions about privacy go to [privacy@yourdomain.com].