Privacy policy

Last updated 8 October 2026

Eigthseat helps founders run an AI product team. The short version: we store your board, never your code. This page explains exactly what that means.

What we collect

• Account: your email address, name, and your GitHub user ID if you sign in with GitHub.
• Board data: project names and briefs, tickets (titles, descriptions, acceptance criteria, status), approvals and comments, and short plain-English summaries written by the agents.
• Run metadata: which agent ran, when, how long, the outcome, and how many files and lines changed. Not the files or lines themselves.
• Connected machines: the name, operating system and helper version of each machine you pair, and when it was last online.
• Connected apps: which chat connectors (for example Claude or ChatGPT) you authorized, and when. For imported plans we keep the tickets and brief the chat sent, plus the source and time of the import.
• Waitlist: the email address you give us.
• Server logs: IP address, time, the page or API route, and the result. We don't log the content of requests.

What we never receive or store

• Your source code, diffs, full agent logs, prompts, project memory files or artifacts. They stay on your machine. When you open a log or diff in the web app, it streams from your machine to your browser through our servers and is not stored or logged.
• Secrets such as .env files, API keys or cloud provider credentials.
• Your chat conversations. A connector only receives the plan fields the chat sends when you ask it to.
• Your AI prompts. Agents run through your own AI tool (such as Claude Code), which talks to its provider under your agreement with them.

How we use it

To run the service: show your board, route jobs to your machine, send emails you asked for (sign-in links, approval notifications), handle billing and support, and keep the service secure. We don't sell your data, show ads or use third-party tracking cookies.

Who processes it for us

• Cloudflare: DNS, network protection and hosting of this website.
• Our server hosting provider: runs the Eigthseat app and database.
• Lemon Squeezy: payments and tax. We never see your full card details.
• Our email provider: sends sign-in and notification emails.

How long we keep it

• Account and board data: while your account is open, and deleted within 30 days after you delete your account.
• Database backups: kept for 14 days, then deleted.
• Server logs: 30 days.
• Waitlist emails: until you ask us to remove yours, or until launch invitations are done.

Your choices

You can export or delete your data, revoke paired machines and connected apps at any time in the web app, or email us and we'll do it within 30 days.

Contact

Questions or requests: [email protected].