Privacy Policy

Last updated: May 5, 2026

The short version

• We don't sell your data. Ever. To anyone.
• We don't train AI on your prompts or runs.
• Browser sessions are ephemeral. The hosted Chrome tab is destroyed after every run.
• Bring your own LLM key (Pro+) and your prompts go straight to Anthropic — we never see them.
• Privacy Mode (coming Day 14) runs the agent on your own device. Your credentials never leave your machine.
• Wipe everything anytime from Settings → Delete account.

What we collect

Account information

When you sign in, we collect your email and (if you use Google OAuth) your name and avatar. That's it.

Run data

For every run, we store:

• The prompt you submitted
• The agent's thoughts, actions, and observations (so you can replay)
• The final result summary
• Optionally, a screen recording from Browserbase (if available; you can disable this in Settings)

Run data is private to your account by default. Only you can see it, unless you explicitly enable a public share link.

Billing information

We use Stripe to process payments. We never see or store your card number — only a Stripe customer ID. See Stripe's privacy policy for details on how they handle payment data.

Usage analytics

We log anonymized request metadata (path, response code, duration) for operational monitoring. No third-party analytics or ad trackers run on urnova.org.

How we use your data

• To run the agent task you asked us to run
• To show you your run history and let you re-run or replay
• To enforce your plan's usage limits
• To process billing
• To investigate abuse or security incidents

We do notuse your data to train AI models. Not ours (we don't train any), not Anthropic's (their API endpoints are configured to opt out of training), not anyone's.

Who we share with

We share strictly the minimum needed to run urNova:

• Anthropic — the prompt and agent context, to power reasoning. (Bring-your-own-key on Pro+ removes us from this loop entirely.)
• Browserbase — agent commands and the public web pages the agent is browsing.
• Supabase — encrypted database for accounts and runs.
• Stripe — billing.
• Vercel and Railway — hosting.

Your rights

You can, at any time:

• Export all your runs (JSON download from Settings)
• Delete any individual run
• Delete your entire account and all associated data
• Make a privacy or data request to legal@urnova.org

We'll honor delete requests within 30 days. Backups roll off within 90 days.

Cookies

We use first-party cookies for authentication only. No tracking cookies, no advertising cookies, no third-party cookies.

Children

urNova is not intended for users under 13. If we learn we have data on a user under 13, we delete it.

Contact

Privacy questions go to legal@urnova.org.

Changes

Material changes will be announced 30 days in advance via email. The "Last updated" date at the top reflects the most recent version.