Privacy Policy

Effective date: 2026-10-25

Claxedo is a coding-agent workspace built by a small team. This page says exactly what the software collects, who can see it, how long it is kept, and how you remove it. If anything here is unclear, email hello@claxedo.com and ask.

Local mode (the default)

When you run the Claxedo desktop app on your own machine without signing in, your work stays on your machine. Your code, files, terminal sessions, chat history and API keys live on your device. We have no server that receives them, and we cannot see them.

When an agent talks to a model provider (Anthropic, OpenAI, Google and others), it uses your own keys and talks to that provider directly. Each provider’s own privacy policy governs what they do with the prompts you send them.

Hosted mode (when you sign in)

Signing in to the hosted control plane stores what it needs to run your workspaces from any device:

• Your account: your email, name, avatar and sign-in credentials, held by Better Auth in the deployment’s own database.
• Your work’s coordination data: organizations, members, projects, workspaces, session titles and status, in Cloudflare D1.
• Hosted session transcripts: the messages of sessions that run in the cloud, so you can open them anywhere. A session on your own machine keeps its transcript on that machine.
• Keys and connections you add: AI provider keys, sandbox provider keys and connections such as GitHub, encrypted at rest.
• Infrastructure: everything runs on Cloudflare, which carries the traffic.

Analytics and error reports

Claxedo uses PostHog and no other analytics vendor. There are two kinds of data, and they are handled differently.

Product analytics (you choose)

Product analytics tell us which features people use and how fast the app feels:

• onboarding steps viewed, completed or left;
• a session started, with the agent and whether it ran on a machine or in the cloud;
• a permission answered, with the kind of tool (for example bash or edit);
• an error message shown, with its class and the screen it appeared on;
• a feature used: the terminal, a Marketplace install, opening a file, the review panel;
• page timings: how long the app and a session took to open, and the standard web vitals;
• a turn finished, with the agent, the model family, the outcome, a token-count range and its durations;
• a key checked, with the provider and the result;
• a cloud workspace created, started, stopped or failed, with its durations, sandbox provider and region.

Turn it off any time in Settings → Privacy → Share product analytics. The choice is stored with your account, so it follows you to every device, and our server enforces it: once it is off, the app stops sending these events and the server drops any event about you before it reaches PostHog.

In the EU, the EEA and the UK, product analytics is off until you say yes. The first time you sign in from there, Claxedo asks once. Declining is the same as turning it off, and you can change your mind in Settings → Privacy. We tell where you are from the country Cloudflare reports for your connection; once you have been asked, you are never switched back to the default, wherever you sign in next.

Error reports (always on)

Error reports are how we find and fix crashes, so they are sent whatever your analytics choice. A report carries the error’s name, its message cut to 300 characters, the stack frames inside Claxedo’s own code and the build that failed. The desktop app also reports when its window stops responding or crashes.

What is never collected

• Your prompts, your code, your files, file paths, repository contents or your keys.
• Your name or email. Every identifier, yours included, leaves our servers only as a one-way hash (the first 128 bits of SHA-256), so the analytics project can count one person’s events without knowing who they are.
• Session replays. Claxedo records no screen, no clicks and no keystrokes. The app has no session recording, and this website turns PostHog’s off.

Events from the hosted app go to PostHog from our server, so PostHog sees Cloudflare’s address, never yours.

The desktop app’s install event

Official desktop builds send one event the first time a new profile launches, before anyone signs in: a random install identifier (not derived from your machine, account or network), your operating system, CPU architecture, OS version, app version and release channel. Builds you compile yourself send nothing, since they carry no analytics key.

Deployments

A deployment sends nothing to PostHog unless its operator sets CLAXEDO_TELEMETRY_MODE=on and configures a key. Self-hosted and self-built deployments are off by default.

This website

claxedo.com counts page views and download clicks. It sets no cookies: its analytics state lives in your browser’s session storage and is gone when you close the tab. Page addresses are cut to their section (/download, /compare) before they are sent, and PostHog derives an approximate country from your IP address on its own servers. The site never asks for your location.

Deleting your data

• Your account: Settings → Privacy → Delete account. For your safety it needs a sign-in from the last 10 minutes; if yours is older, sign in again and delete. Delete your workspaces and the organizations you founded first. Deleting erases your sign-in, email, name, linked logins, keys, connections and your personal organization with everything in it, and removes you from every organization. Signing up again with the same email makes a new account.
• An organization: Settings → Organization → Delete organization, for its owners. Delete its workspaces first. Its keys, connections, transcripts, tasks and pages are erased, and its members lose access.
• A workspace: deleting it erases its session transcripts, its cloud sandbox and the secrets it was given.
• Local mode: deleting the app and its data removes everything.

Every deletion confirms first, and none can be undone.

How long we keep it

• Your account and work: until you delete them.
• Usage and machine-time records: kept for billing after a deletion, linked only to an anonymous account id, with no email or name.
• Records of access changes (who joined, left or was deleted): kept, so an organization can see its own history.
• Backups: database snapshots roll off after 30 days. Restoring one could bring deleted data back, so we repeat every deletion made after the snapshot.
• Analytics and error reports: kept for PostHog’s project retention. Deleting your account does not yet remove your past events from PostHog automatically: email hello@claxedo.com and we delete them.

Payments

Claxedo is free for one project. Pro is sold through Polar, our merchant of record: Polar collects your payment details and billing address and handles tax and invoices, and we never see your card. We keep the order id and the account it belongs to, so we know who has Pro.

Email

We send account email only: email verification, password resets and organization invitations. No marketing email, ever.

Changes to this policy

If we change how data is handled, we update this page and move the effective date forward. Pro includes the full source, so Pro customers can read the code to check every line of this page.

Questions? Email hello@claxedo.com.