Privacy Policy

What We Collect

When you sign in to Attach Platform, we collect the following information for Attach Files workspace use:

• Profile information from your Google or GitHub account (name, email address, avatar) provided through Auth0 authentication.
• Artifacts that you or your AI agents publish to the platform, including file content and metadata.
• API keys you generate for programmatic access.
• Usage data such as artifact publish and retrieval events, stored as audit logs.

How We Use Your Data

• Authenticate you and maintain your session.
• Store and serve artifacts within your private namespace.
• Track provenance (who published what, when, and from which runtime) for audit purposes.
• Send you service-related emails, including onboarding guidance, setup tips, and important product updates. These are transactional communications to help you get the most out of Attach Files, not marketing newsletters.

We do not sell your data. We use Google Analytics to understand how visitors use the site (page views, referral sources). We do not run advertising trackers. We will never share your email with third parties for marketing purposes.

Data Storage & Security

Managed hosting: Your data is stored on our infrastructure with encryption at rest and in transit.

Future enterprise deployment: Deployment models are planned separately from this dashboard rebrand. Any self-hosted boundary must be documented before use.

Artifacts are private to your namespace. There is no cross-namespace access unless you explicitly create a share token.

Third-Party Services

• Auth0 handles authentication. Your sign-in is subject to Auth0's Privacy Policy.
• Google and GitHub OAuth are used as identity providers.
• Google Analytics is used to measure site traffic and usage patterns. See Google's Privacy Policy.

Cookies

We use an essential cookie (attach_session) to maintain your authenticated session. Google Analytics sets its own cookies (_ga, _ga_*) to measure site usage. We do not use advertising or tracking cookies.

Data Retention & Deletion

Your artifacts and account data are retained for as long as your account is active. You can request deletion of your account and all associated data by contacting us at privacy@attach.dev.

Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be communicated via the email associated with your account.

Contact

For privacy-related questions, reach us at privacy@attach.dev.