AI models. When you use a model, what you send it — your messages, the files and tool results in the conversation, and images — goes to the company that runs that model, including OpenAI, Anthropic, DeepSeek and Moonshot AI, either directly or through Microsoft Azure or Amazon Bedrock. If you connect your own API key, it goes to that account instead. Your Store searches may also be sent to OpenAI or Microsoft Azure to match them with results. These companies handle what they receive under their own terms.
Hosting. Your data is stored with Amazon Web Services in the United States, and Cloudflare delivers this website.
Payments. Stripe runs checkout on its own page. We never see your full card number; we keep Stripe's record of each payment, which includes the billing details you give Stripe.
Web search and maps. When an agent searches the web or an app looks up a place, the search goes to Brave Search or Mapbox.
Email. Sign-in codes and account emails are sent through our email provider.
The Store. Anything you publish — an app, agent or skill, with its name, description and contents — is public, and we index it so people can find it.
Beyond these, we share your data only when the law requires us to.