Privacy

caveira is a coding agent you run in your terminal or as a desktop app, with an optional caveira account that gives it access to hosted models. This page says what we collect when you use caveira.app and a caveira account, why, and who else sees it. Short version: we keep what we need to run your account and bill you, and nothing else. We don’t sell your data and we don’t run ads.

What we collect

• Account: your email address, and a hashed password if you sign up with one. If you sign in with Google or GitHub, we get your verified email address from them. We don’t get your password there or access to anything else in that account.
• Sign-ins: a session for each browser, terminal or desktop app you sign in from, with the device name you see on your account page and when it was last used.
• Usage: for each request your agent makes through your account, the model, the number of tokens in and out, and the time. This is how plan limits work.
• Billing: your plan, your subscription status and its billing dates. Payments go through Stripe. Your card details go to Stripe directly and never reach our servers.

What we don’t keep

We don’t store your prompts, your code or the model’s answers. Requests pass through our server on their way to the model provider and only the token counts are recorded. When you run caveira against a local model or your own endpoint, nothing goes through us at all. The terminal and desktop apps don’t send analytics or telemetry.

Who else handles it

• abliteration.ai runs the hosted models. Your requests, prompts included, are sent to it to get an answer.
• Stripe processes payments and keeps your billing details.
• Vercel hosts the site and Turso hosts the database.
• Google and GitHub, only if you choose to sign in with them.

Each handles data under its own privacy policy. We share data with no one else, except when the law requires it.

Cookies

One cookie keeps you signed in. No tracking or advertising cookies.

Keeping it safe

Passwords and sign-in tokens are stored hashed, and everything travels over HTTPS. No system is perfectly secure, but we keep what we hold small, so there’s less to lose.

Your choices

You can sign out any device from your account page and cancel your plan at any time. To get a copy of your data or to delete your account and everything tied to it, email contact@caveira.app. We may keep billing records as long as tax law requires.

Children

caveira isn’t meant for anyone under 13, and we don’t knowingly collect data from them.

Changes

If this policy changes, we’ll update this page and its date. For big changes, we’ll email account holders first.

Contact

Questions: contact@caveira.app