Privacy policy

1. Who we are

Makina at app.makina.so is run by the operator's legal name (to be confirmed by the operator). This page says what Makina collects, why, who else handles it, and how long it is kept. The Terms of service say how Makina may be used.

2. What we collect

• Your account: your email address and your name, as the sign-in provider gives them to us, and a record of each sign-in session. We keep a fingerprint of your session cookie, never the cookie itself.
• Your work: each Task's objective, the messages between you and a Run, the files you attach, the journal of what each Run did (every step, question, approval and outcome), the screens its computer showed, and the signed receipts of actions taken.
• Your computer: the files in its workspace folder, saved so that they come back on the next machine. The computer reaches the internet, so what a Task opens there passes through it.
• Your use: what each Task cost in model use and computer time, your workspace's plan and limits, and the time zone your device reports, so that your day is measured as your own.
• Payment: Stripe takes your card on its own pages. We keep the Stripe identifiers of your customer record and subscription and your plan's status, never your card details.
• Logs: request identifiers, outcome codes and timings, kept to run and secure the service. They do not contain the content of your work.

3. Who else handles it

Makina is built on these services. Each one receives only what its part needs.

• WorkOS signs you in: your email address, your name and how you signed in.
• Stripe takes payment: your card and billing details, entered on Stripe's own pages.
• E2B runs your computer, and so holds whatever is on it while it exists.
• OpenAI and OpenRouter run the models. What a Run works with (the objective, the messages, what is on its computer's screen and what its tools return) is sent to the model the Task runs on: to OpenAI for the default model, and through OpenRouter to the maker of any other. We ask OpenAI not to store what it is sent; OpenRouter and the models it reaches handle requests under their own terms.
• Fly.io hosts Makina and its database in the United States. Files, screens and saved workspaces are stored with Tigris, Fly.io's object storage.
• Temporal Cloud and Upstash coordinate Runs and pass notifications between Makina's own services. What they carry is identifiers, not the content of your work.

We do not sell personal data, show advertising, or train models on your work.

4. How long we keep it

• Your work and its records (Tasks, journals, messages, files, screens, receipts and usage) are kept for as long as your account exists. Nothing is deleted automatically yet.
• Your computer pauses after a few minutes nobody is using it and keeps what is on it while it is paused. A computer left unused for 30 days is put away: its workspace folder is saved first and restored on the next one; everything else on it is deleted with it.
• Sign-in sessions end after 30 minutes without use, and after 12 hours whatever happens. Their records are kept as a security log.
• Deleting your account is done by hand today: write to the address below and we delete your account and its data, except what the law requires us to keep, such as payment records.

5. Cookies

Makina sets only the cookies it needs: one for your session, one while a sign-in is in progress, one remembering the workspace you chose, and one that opens a screen you have taken over. There are no advertising or analytics cookies.

6. Your choices

Your Tasks, journals, receipts and usage are in the console whenever you are signed in. To get a copy of your data, to correct it or to delete it, write to the address below. Where the law gives you further rights over your data, such as the GDPR's, write to the same address: how those requests are handled (to be confirmed by the operator).

7. Changes

When this policy changes, the date at the top changes. A change that matters to you is told to you in the console before it takes effect.

8. Contact

Write to legal@makina.so (to be confirmed by the operator).