Privacy Policy

Last updated: October 11, 2026

Overview

Looking for the Pilos browser extension? It has its own policy, at pilos.net/privacy/extension. This page covers Pilos Agents and Pilos Rooms only.

This policy covers two products, and they handle your data very differently.

• Pilos Agents is a local-first desktop application. Your conversations, project files, and AI interactions stay on your machine. We do not receive or store your development data.
• Pilos Rooms is a hosted web service, and it is not local-first. Sharing an agent session with other people means the session has to be stored somewhere they can reach, so a room’s event log — including diffs of the files the agent changed and the output of the commands it ran — is stored on our servers. If that is not acceptable for a given repository, do not open a room for it.

It also covers what limited data we collect through the website, the license server, and optional services.

Data We Collect

Desktop Application

The Pilos Agents desktop app:

• Does not send your conversations, code, or project data to our servers
• Does not include telemetry, analytics, or crash reporting by default
• Does communicate with Anthropic via the Claude Code CLI using your authenticated account — refer to Anthropic's privacy policy for how they handle requests
• Does contact our server if you create an account, to sign you in and to sync cloud-backed features

Pilos Rooms

Rooms works by storing a session so other people can watch and replay it. When you run the Pilos runner against a room, it sends the following to our servers, where we keep it as an append-only log:

• What the agent says and the reasoning it shows
• Every tool call — the tool, the command line, its input, and its output, truncated at a fixed size
• Diffs of the files the agent changes, including the changed lines themselves. This is your source code, and it is the part people most often do not expect
• Every approval: the rule that triggered it, the command it was for, the decision, and which account made it
• Messages that people in the room send to the agent
• Session status, who holds control, and the summaries written when control is handed over

Before any of this leaves your machine, the runner strips credentials it can recognise — private keys, API keys and tokens in common formats, and the values of environment variables whose names look like secrets. This is a safety net, not a guarantee: a secret in an unusual format, or one hard-coded in a line the agent happens to change, can still end up in the log.

The runner connects outbound only. It opens no port, accepts no commands other than the ones the room is designed to send, and gives nobody in the room access to your machine, your shell, or any file the agent did not touch.

We also store, per room: its name, the repository and branch name you give it, who its members are and what role each one has, and who is currently driving.

Presence — who is in a room right now and which card they are looking at — is held in memory with a short expiry and is never written to the log. It disappears when you close the tab.

Accounts

Pilos Agents is free and an account is optional. If you create one, we store:

• Email address
• A salted hash of your password — never the password itself
• Account creation and last sign-in timestamps
• A random machine identifier, so device pairing knows which install is which

This data is used solely to sign you in and to run cloud-backed features. We do not sell or share it with third parties. Customers who purchased a plan before Pilos became free may also still have a licence key and subscription record on file.

Pilos Rooms is a separate sign-in, and the only way in is GitHub. We ask GitHub for read:user and user:email, and store the GitHub account id, username, display name, email address and avatar URL, plus a time zone and city if you set one so the handoff screen can show people’s local times. We never receive your GitHub password, and the token is not used to read your repositories.

Website

The pilos.net website runs no analytics at all — there is no analytics script on any page of it — and sets no tracking cookies. The server that serves it keeps standard access logs, as every web server does.

Third-Party Services

• Stripe — Previously processed payments. Pilos is now free and we take no new payments; Stripe still holds records for customers who subscribed earlier, so they can cancel. See Stripe's privacy policy.
• Anthropic — Processes AI requests via Claude Code using your own authenticated account. Separately, when someone in a room hands control to another person, our server sends a transcript of the recent part of that room to the Anthropic API to write the handoff summary. That transcript contains messages, the agent’s reasoning, one-line descriptions of the tool calls, the paths of changed files and how many lines changed, failed command output, and the names of the people involved — it does not contain the contents of a diff. See Anthropic's privacy policy.
• GitHub — Hosts the open source repository, and is the identity provider for Pilos Rooms. Interaction with GitHub is governed by GitHub's privacy policy.
• Amazon Web Services — Hosts this website and our servers. See AWS's privacy notice.

MCP Server Connections

When you configure MCP integrations (GitHub, Slack, Jira, etc.), the desktop app connects directly to those services using credentials you provide. We do not proxy, log, or store any data from these connections.

Data Retention

• App data: Stored locally on your machine. Delete it anytime by removing the app data folder.
• Account data: Retained until you ask us to delete it, or 24 months after your last sign-in.
• Website analytics: Aggregated, non-personal data retained for up to 24 months.
• Room event logs: Kept for as long as the room exists. Replaying the session is what a room is for, so nothing in the log expires on its own, and there is no automatic clean-up today. There is also no self-service delete yet — email privacy@pilos.net naming the room and we will delete it and its log, usually within a few days.
• Room presence: Held in memory and expires within minutes of you leaving.

Cookies

The pilos.net website does not use cookies for tracking, advertising, or profiling. We may use essential cookies that are strictly necessary for the service to function. No third-party tracking cookies are set.

Pilos Rooms sets one essential cookie to keep you signed in. It holds a signed session identifier and nothing else, is not readable by JavaScript, is not sent to other sites, and is not used for tracking. Signing out removes it.

Your Rights

You may request to:

• Access any personal data we hold about you
• Delete your account and associated data
• Export your data in a portable format

Contact privacy@pilos.net for any data requests.

Your Rights Under GDPR (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Legal basis for processing: We process personal data based on (a) contractual necessity (running your account and cloud-backed features), and (b) legitimate interest (website analytics, product improvement).
• Right of access: You may request a copy of any personal data we hold about you.
• Right to rectification: You may request correction of inaccurate personal data.
• Right to erasure: You may request deletion of your personal data ("right to be forgotten").
• Right to restrict processing: You may request that we limit how we use your data.
• Right to data portability: You may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interest.

To exercise any of these rights, contact privacy@pilos.net. We will respond within 30 days.

If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority.

Your Rights Under CCPA (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know: You may request details about the categories and specific pieces of personal information we have collected.
• Right to delete: You may request deletion of personal information we have collected from you.
• Right to opt-out: We do not sell personal information. There is no need to opt out.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your rights, contact privacy@pilos.net.

Children's Privacy

Pilos Agents is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, contact us at privacy@pilos.net and we will promptly delete it.

International Data Transfers

Pilos Agents is a local-first application — your project data and conversations are not transferred to our servers. Pilos Rooms is not: a room’s event log, including the diffs it contains, is stored on our servers, which are located in the United States. Account information and website analytics are processed in the United States as well.

Third-party services (Stripe, Anthropic, GitHub, AWS) may process data in various jurisdictions according to their own privacy policies linked above.

Changes to This Policy

We may update this policy from time to time. Significant changes will be announced on our GitHub repository and website. Continued use of Pilos Agents after changes constitutes acceptance.

Contact

Questions about privacy? Email privacy@pilos.net.