Privacy policy

Last updated 2026-04-24.

Joule Atelier is a privacy-respecting agent platform. This page explains what data we collect, why, and how you control it. Plain English; legal review on file.

What we collect

• Account data. Email, org name, plan, and billing identifier (from Lemon Squeezy). Required to operate the service.
• Sync metadata. Task ids, memory ids, and audit events scoped to your org. Required to deliver multi-device sync.
• Operational telemetry. Aggregate request rates and error counts. No prompt content, no response content, no personal data.
• Marketing analytics. A single page-view beacon to self-hosted Plausible. We do not run third-party trackers and we do not set cross-site cookies.

What we don’t collect

• BYOK API keys — stored in your OS keychain, never sent to us.
• Local code, file contents, or shell history.
• Prompt or response bodies, unless you enable cloud reflections.

Your rights

Export, delete, or correct your data on demand from your privacy settings. We respond to requests within 7 days.

Sub-processors

We use AWS for hosting, WorkOS for authentication, Lemon Squeezy for billing, and Plausible (self-hosted) for analytics. The full list with data-residency notes lives in the trust center.

Contact

Privacy questions? privacy@jouleatelier.com.