Privacy Policy

Last updated: November 1, 2026

What we can't see

The text of your tasks, their results and your approvals are end-to-end encrypted between your devices, and the encryption keys never leave them. Your files and model keys never reach us.

What we keep

Your email and sign-in sessions.

Your device names, their public keys and when they were last seen.

Encrypted messages and their times, until delivered.

Your subscription status and PayPal subscription number, and PayPal's notices as they arrived, which may include the payer's name and email.

Why

To sign you in, carry messages between your devices, manage the subscription, payments and disputes, and prevent abuse.

How long

An encrypted message is deleted after delivery, or after 7 days if unread.

A removed device is deleted after 30 days.

Subscription and payment records stay as long as your account exists, and longer if a dispute or legal duty requires it.

Who we share with

We don't sell your data. These providers run the service: Supabase for accounts and data (Germany), PayPal for payment, Resend for sign-in emails, Cloudflare for hosting the site. Each handles data under its own policy.

The website

The site uses no advertising trackers or analytics. It only stores your theme choice in your browser.

Your rights

You can ask for a copy of your data or for your account to be deleted at support@rafiqagent.com. We may keep payment records the law requires or an open dispute needs.