Privacy Policy

Last updated September 21, 2026

This explains what Laurel collects, why, and what we do with it. The short version: we keep the minimum needed to run your machines, we don't sell anything, and your code stays yours.

What we collect

• Account details. Your name and email address, via our sign-in provider (Clerk), so we know whose machines are whose.
• Machine metadata. Machine names, sizes, which harnesses you picked, when a machine was last active, and whether it is awake or asleep. This drives sleep, wake, and the usage estimate you see.
• Agent status. Whether an agent on a machine is working, done, or waiting on you. Not what it said or did.
• Billing details. Handled by our payment processor. We never see your full card number.

Website analytics

We use Vercel Web Analytics to understand visits, page views, referral sources, and general device and location statistics. We remove workspace identifiers and access parameters from the page URLs sent to analytics. Marketing campaign parameters may be retained to understand where visits come from. We do not send your workspace files or terminal contents to analytics.

What lives on your machine

Your code, files, terminal history, and the logins for the tools you use (for example your Claude, Codex, or GitHub sessions) live on your machine's disk, inside Google Cloud. We don't copy them elsewhere. Traffic between your browser and your machine passes through our gateway encrypted; the gateway forwards it and does not store it.

What we don't do

• We don't sell or share your data with advertisers.
• We don't train models on your code.
• We don't read the contents of your machine, except when you ask us to help with a problem and only as far as needed.

Who else is involved

Laurel runs on Google Cloud (machines and networking), Clerk (sign-in), Convex (the machine registry), and Vercel (the app). Each processes data only to provide its part of the service. The AI vendors behind the agents you run receive whatever you send those agents, under their own privacy terms.

Keeping and deleting data

Deleting a machine destroys its disk immediately. Deleting your account removes your machines and your account record. Backups held by our providers expire on their normal schedules.

Your rights

You can ask us what we hold about you, ask us to correct or delete it, or take your data with you. Email hello@laurel.dev and we'll respond within 30 days.

Changes

If this policy changes in a way that matters, we'll tell you in the app or by email before it takes effect.