1. Introduction
Anarchy Labs ("we", "us", "our") operates chat.dev ("the Service"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Service.
2. Information We Collect
Information you provide:
- Email address — used for account creation and authentication
- API keys — encrypted at rest, used to execute agent tasks
- Agent configurations — prompts, settings, and environment variables
- Code and data — content processed by your agents
Information collected automatically:
- Usage data — pages visited, features used, agent activity metrics
- Session recordings — anonymized screen recordings for product improvement (via Mixpanel)
- Device information — browser type, operating system, screen resolution
- Log data — IP address, access times, error logs
- Optional marketing measurement data — if you consent, Meta browser identifiers, ad click identifiers, account completion, first agent creation, and subscription purchase events
- Optional V3 visitor personalization data — if you consent and the feature is enabled, a business visitor-identification provider may return a professional name, business email, role, company, company website, industry, company size, confidence, and LinkedIn URL
3. How We Use Your Information
- To provide and maintain the Service
- To authenticate your identity and secure your account
- To execute AI agent tasks using your provided API keys
- To send verification codes and essential account notifications
- To send product updates and tips (only if you opt in)
- To analyze usage patterns and improve the Service
- To measure whether our ads lead to completed accounts, first agent creation, and paid subscriptions, only when you allow marketing measurement
- To personalize the live V3 conversation with current public professional context, only when you allow optional marketing and personalization processing
- To detect and prevent abuse or unauthorized access
4. Data Storage and Security
Your data is stored on secure, isolated servers. API keys and credentials are encrypted using AES-256 encryption at rest. Session data is stored in HTTP-only secure cookies. We use industry-standard security measures to protect your data, but no method of transmission or storage is 100% secure.
5. Data Sharing
We do not sell your personal information. We may share data with:
- Third-party AI providers (e.g., OpenAI) — your prompts and code are sent to these services during agent execution, subject to their privacy policies
- Infrastructure providers — to host and operate the Service
- Analytics providers (e.g., Mixpanel) — anonymized usage data and session recordings
- Advertising measurement providers (Meta) — only with your consent, browser identifiers and conversion events through the Meta Pixel and Conversions API; email, phone, and internal account identifiers are normalized and SHA-256 hashed before transmission
- Business visitor-identification providers (such as RB2B) — only with your consent and when enabled, page, browser, network, and first-party identifier data used to match public professional information for the live V3 conversation
- Law enforcement — if required by law or to protect our legal rights
6. Data Retention
We retain your account data for as long as your account is active. Agent logs and terminal output are retained for 30 days. Correlated V3 professional identity fields and the resulting public-source research are retained for up to six hours. We do not retain the provider's raw visitor payload. You may request deletion of your account and associated data at any time by contacting us.
7. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Opt out of marketing communications
- Export your data in a portable format
8. Cookies
We use essential cookies for authentication (session cookies). We use Mixpanel for analytics, which uses localStorage for tracking. If you select the optional product-email, marketing-measurement, and V3-personalization checkbox during signup, we may load the Meta Pixel and an enabled business visitor-identification script. Meta may set first-party _fbp and _fbc cookies. RB2B may set first-party cookies including _reb2buid, _reb2sessionID, _reb2bref, and related identity-resolution cookies disclosed by RB2B. These optional scripts are disabled unless you select that checkbox. Withdrawing consent clears known first-party identifiers and prevents the scripts from loading on future visits. You may also clear chat.dev site data or contact privacy@chat.dev.
9. Children's Privacy
The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top indicates the latest revision.
11. Contact
For privacy-related questions or data requests, contact us at privacy@chat.dev.