Privacy policy
What we collect, where it lives, and what never leaves your machine.
This privacy policy is a working draft written from what the system actually does. It has not been reviewed by counsel and is not a binding agreement. If you need the reviewed version before committing to anything, ask us at arijit.das@selfsupervised.de.
What we collect
Account data
Your email address and the identifier issued by the sign-in provider. If you sign in through GitHub, Google, Microsoft or Apple, we receive the email and subject identifier from that provider — we never see your password.
Product data
Work you create in the product: runs and their execution traces, files you upload, and the projects they belong to. All of it is stored against your tenant and is not readable by another tenant.
Connected credentials
If you connect GitHub or an OpenAI key, we store those tokens encrypted and use them only to perform the actions you asked for. They are never returned to your browser and never logged.
Billing
Payments are processed by Stripe. Card details go to Stripe directly and are never stored on our systems; we keep the subscription state and invoice records Stripe returns to us.
What Border Collie does on your machine
Border Collie captures agent traces locally and applies redaction on your own machine before anything is transmitted. It runs fully offline and requires no account. Uploading a capture to train.cloud is an explicit action you take, not a default.
What we do not do
- We do not sell personal data.
- We do not run third-party advertising or tracking pixels.
- We do not train shared models on your traces without an explicit, separately agreed opt-in.
Sub-processors
We run on Amazon Web Services, which hosts our compute, database and file storage. Stripe processes payments. Sign-in is handled by Amazon Cognito and, if you choose one, your chosen identity provider.
Your rights
You can request access to, correction of, or deletion of your personal data by writing to arijit.das@selfsupervised.de. Deleting your account removes your tenant's product data.
Still to be settled
Being specific about what is unresolved is more useful than a placeholder that sounds finished. Pending counsel review:
- Retention periods for traces, uploads and logs.
- The lawful basis and international transfer mechanism for users in the UK, EEA and Switzerland.
- The named data controller entity and, if required, a representative.
- A complete, versioned sub-processor list with change notification.
Contact
Questions about this policy: arijit.das@selfsupervised.de.