Your data, explained.

What we collect

• Account details from the provider you sign in with: your name, email address and profile picture.
• Your chats with Conny: the messages you send, Conny’s replies, and the steps it took, such as the files it read, the commands it ran and what came back.
• Project memory: the notes and facts Conny keeps about your servers so it doesn’t have to relearn them each time.
• Server connection details such as host, port and username. Passwords and keys are encrypted; see Security.
• Plugin development: which GitHub organization you connect and which of its repositories a chat opens. The code itself lives in your organization, not with us. Conny saves a checkpoint of its work there after each turn, on a conny-wip branch, so a chat can be rewound. Sandboxes are temporary and cleared when they pause; while one runs, we log the websites it connects to, to spot abuse.
• Usage and billing: your plan and how much of your allowance you’ve used. Payments are handled by our payment provider, so we never see your full card details.
• How you use the site: light analytics, such as which pages get visited and which buttons get pressed, and recordings of how a page was used, so we can see where Conny is confusing and fix it. This includes your country, but not your IP address. See Cookies below.
• Security signals, to spot one person running several accounts to get around usage limits: a scrambled form of the IP addresses you use Conny from, a random ID for your browser and a summary of its setup (timezone, language and screen size), the summary of any card you save with our payment provider (its network, last four digits, expiry, country and cardholder name, never the full number), and, for servers you connect, the plugin’s ID for the server, the address it connects from and the players in its operator list. They are scrambled with a secret key, so they can’t be turned back into your address; we only use them to see when two accounts match. Only the Conny team sees them, and each is deleted 90 days after we last see it.

How we use it

• To run Conny: answering your messages, working on your servers and remembering your projects.
• To keep your account, plan and usage allowance working.
• To keep Conny safe, including spotting abuse and enforcing our Terms.
• To understand how people find Conny, and to reward people who refer their friends.
• To see where people get stuck when they start using Conny, so we can make it easier.
• To email you now and then: a tip if you get stuck setting up, news, or an offer, each with an unsubscribe link. If something affects your account, like a bug we made up for, we email you about that too.

Debugging and improving Conny

When something goes wrong, such as a bug, an error, a bad answer or a problem you report, the Conny team may review the relevant chats, agent steps and logs to work out what happened and fix it. We also look at how Conny performs across conversations so we can make it better.

We only look at your chats to fix and improve Conny, never to sell or share them.

Access is limited to the people who build and support Conny. Your server passwords and keys are never shown in these reviews. They stay encrypted.

Who else processes your data

To reply to you, your messages and the relevant context are sent to the AI model providers that power Conny. We also rely on providers for hosting, sign-in, payments, product analytics (PostHog), sending email (Resend), and the sandboxes plugins are built in, and on GitHub for the organization you connect. Each one only receives what it needs to do its job.

We do not sell, rent or trade your personal data.

Cookies

We use essential cookies to keep you signed in. We don’t use advertising cookies.

We also set two cookies of our own to learn how people find Conny. The first remembers where your first visit came from, such as the website that linked to us, for up to 180 days. The second remembers a referral link you followed, for up to 60 days, so the person who shared it can be thanked. When you create an account, we save that information on your account. These cookies are only read by Conny, are never shared with anyone else, and are not used to track you across other websites.

One more cookie keeps Conny fair: it holds a random ID for your browser, for up to two years, with a copy in your browser’s storage, so we can tell when several accounts are used from the same browser. Like the others, it is only read by Conny and is never used for advertising or to follow you across other websites.

For those light analytics we use PostHog. It sets no cookies and never receives your IP address. It can show us how a page was used: where someone clicked and what was on the screen, including chats and the server files Conny showed. Passwords, keys, tokens and anything that looks like one are hidden before they leave your browser, and images are never recorded. It works on our behalf and is never used for advertising.

Your choices

• You can delete chats and project memory from inside the app.
• You can delete your account from Settings. It is locked straight away and permanently deleted after 30 days; signing in before then lets you restore it. After deletion we keep only billing and usage records we are required to retain, which no longer carry your name or email, and, if your account ever had a subscription, a one-way hash of your email address so the same address cannot claim another free trial.
• You can also ask us to delete your account by emailing [email protected] from the address on your account.
• You can ask us what we hold about you at the same address.

Changes to this policy

If we change how we handle your data, we’ll update this page and the date at the top of it.

Questions?

If anything here is unclear, or you want to know exactly how Conny handles your servers, ask us. A real person will answer.