Privacy policy

Version 2026-10-19

Who is responsible

[Legal name, address and privacy contact of the operator, and the data protection officer if one is required.]

What stays on your computer

The desktop app keeps your accounts, workspaces, terminals, chats, brain and memory on your computer, and API keys only in the operating system's vault. The AI CLIs talk to their own providers directly: YardPro does not route those conversations through its servers.

What the YardPro cloud keeps

• Account: your name, e-mail address, whether the provider verified it and the address of your profile picture, as GitHub or Google send them when you sign in, plus that provider's account identifier and the tokens it issues at sign-in. YardPro does not use those tokens to act on your GitHub or Google account.
• Sessions: for each sign-in, the IP address, the identification of the browser or app (user agent), and when it started and when it expires.
• Organizations: the organizations you belong to and your role in each one.
• Devices: for each computer where you sign in to the desktop app, its name, operating system, app version and when it was last seen.
• Terms: which versions of these documents you accepted, when, in which organization and in which language.
• Data-sharing choices: every level set by you or by an owner or admin of your organization, who set it and when.

Data-sharing levels

Sharing is off by default. Each member chooses a level for each organization. An owner or admin can set a limit for all members of the organization, and the most restrictive of the two applies.

• Off: nothing from your sessions leaves your computers.
• Metadata: usage, counts, names of tools, skills and MCP servers, states and errors, without content.
• Content: metadata plus prompts, summarized responses and tool output, after your computer removes secrets and personal data from them.

Collection is not available yet. When it arrives, it follows the level in force, and turning sharing off stops the sending at once. A choice counts only under the privacy policy in force when it was made: when this policy changes, sharing stays off until you choose again.

Why

To sign you in, keep your sessions and devices under your control, show your account and organizations, and follow your data-sharing choices. [Legal bases under the LGPD and the GDPR.]

Who else processes data

• GitHub and Google, when you sign in with them.
• Vercel, which hosts the website and the API, and Neon, which hosts the database. [Regions, international transfers and data processing agreements.]

The website uses cookies only for the signed-in session, the sign-in steps and your theme and language, and your browser's session storage to play the opening animation once. There are no advertising or analytics cookies.

How long

[Retention periods.] Signed-in sessions expire on their own, and you can end them sooner from your account page.

Your rights

On the web you can see your account, devices and sessions and change your data-sharing level at any time. [How to ask for access, correction, a copy or the deletion of your data, and how soon you get an answer.]

Changes

A new text of this policy gets a new version, and you are asked to accept it.

Contact

[Address for privacy requests.]