Legal
Privacy policy — not yet written
This page is a placeholder. SHAI's privacy policy will be drafted by the owner's counsel and will replace this text in full.
Nothing here is a policy. It is a truthful description of what the software does with data today, written so that nobody has to guess while the real document is drafted.
What SHAI holds
- Your account (email and sign-in identity), through Clerk.
- Your business profile: what you sell, to whom, at what price, in your words.
- Your runs, their transcripts, and what each one cost.
- Credentials for the tools you connect — encrypted at rest with AES-256-GCM, and never shown to the model.
What SHAI does not do
- It does not sell data.
- It does not train models on your data. The model runs on your own key, under your own vendor agreement.
- It does not show one tenant's data to another; the database client enforces that itself.
Sub-processors
- Vercel — serves the web application
- Railway — runs the worker and the comms service
- Neon — the database — every row this platform stores
- Upstash — the queue a run waits in
- Clerk — sign-in and session verification
- Anthropic — the model that does the work, on your own key — so Anthropic's terms with you, not with us, govern it
- GitHub — your instance repository, in your own account
- Stripe — subscriptions and invoices; it holds the card, this platform never does (only when the operator or you connect it)
- Composio — the managed OAuth hop when you connect a tool through the catalogue (only when the operator or you connect it)
- Pipedream — the managed OAuth hop, and the tool call, when you connect a tool through the catalogue (only when the operator or you connect it)
- Cloudflare R2 — object storage for the files a run produces (only when the operator or you connect it)
- Resend — the inbox a document can be forwarded to (only when the operator or you connect it)
- Browserbase — a hosted browser, when you connect one instead of the worker's own (only when the operator or you connect it)
- Twilio — calls and text messages, on the operator's own account (only when the operator or you connect it)
- Slack — SHAI in a Slack workspace (only when the operator or you connect it)
- Microsoft — SHAI in Microsoft Teams (only when the operator or you connect it)
- Discord — SHAI in a Discord server (only when the operator or you connect it)
- OpenAI — bulk and mechanical work, on your own key (only when the operator or you connect it)
- Google — bulk and mechanical work, on your own key (only when the operator or you connect it)
- DeepSeek — bulk and mechanical work, on your own key (only when the operator or you connect it)
- OpenRouter — bulk and mechanical work, on your own key (only when the operator or you connect it)
Getting it back, or getting rid of it
Export as JSON from settings, at any time. Deleting your account removes your rows, unlinks your repository, and tells you exactly what is left to do by hand rather than pretending the job is done.
Owner step: replace this page with counsel's drafted policy before the first paid account.