Privacy Policy

1. Information we collect

• Account and support information. Your email address, profile name, account identifiers, authentication and session information, and messages you send to support.
• Billing information. Subscription status, customer and transaction identifiers, and billing details needed to administer your membership. Stripe processes payment details and may collect your billing address and tax information. Hoblets does not store your full payment-card number.
• Workspace content. Messages, prompts, AI responses, uploaded and generated files, Hoblet names and instructions, saved memories and their history, routine schedules and run history, and tool results. This can include personal information about you or others that you choose to provide or authorize a Hoblet to access.
• Connected accounts. Provider connection status, available models and capabilities, authorization credentials, and data returned by services or plugins you connect. Your hosted computer can retain browser sessions and connected-provider credentials so your Hoblets can continue working.
• Desktop activity. Screenshots or frames of your hosted workspace, and the mouse, keyboard, and clipboard input needed to operate it. Screenshots and tool results may contain content visible in that workspace. The remote desktop viewer shows your hosted computer; it does not itself record your personal device’s screen.
• Technical information. IP addresses, browser and device information, app versions, request timestamps, service activity, errors, and security or diagnostic logs collected by the app and its hosting providers.

2. How we use information

We use information to authenticate you, provide and maintain your workspace, execute your instructions and routines, retrieve relevant memories, connect services, process membership payments, respond to support requests, diagnose problems, prevent abuse, and meet legal obligations.

Authorized personnel may access relevant information when needed to support, secure, or operate the service. Your content is processed by our infrastructure and the services involved in your requests; Hoblets is not an end-to-end encrypted service.

3. AI providers, memory, and plugins

When you use a connected AI provider, we send the prompts, conversation context, relevant files or tool results, and recalled memories needed for that request to that provider. Preparing saved memories for retrieval can also send memory content to a connected provider, even when you are not actively chatting.

Memory storage and retrieval run in your hosted workspace. “Local” memory processing refers to that hosted computer, not necessarily to your phone or personal Mac. Deleting or updating a memory affects future retrieval; earlier messages, revision history, and information already sent to a provider are separate copies.

We do not use your workspace content to train our own general-purpose AI models. A connected provider’s retention, model-improvement practices, and account controls are governed by its own terms and settings. A subscription connection does not by itself guarantee that the provider will never retain or use submitted content.

Plugins, websites, and other services you authorize can receive the information needed to perform their actions. Their own policies apply to their handling of that information. Review permissions and only connect services you trust. Disconnecting a service prevents future authorized use through that connection but does not retract information already sent to it.

4. When we share information

We disclose information to service providers that help operate Hoblets. Current core services include:

• Clerk for account authentication and session management.
• Stripe for payment processing, subscriptions, tax details, and fraud prevention.
• Vercel for the website, API, and associated operational logs.
• Cloudflare for network services, application records, and file storage.
• Fly.io for hosted workspace computers and persistent storage.
• Google Workspace for support email and related correspondence.

These links describe the providers’ own privacy practices; their processing on our behalf is also subject to our service arrangements with them. Connected AI providers and plugins receive information as described above. App-store and device-platform providers may separately process installation, diagnostics, permission, or speech-recognition data.

We may also disclose information when reasonably necessary to comply with law or valid legal process, protect people or the service, investigate misuse, or establish or defend legal claims. If our business is acquired, merged, or reorganized, information may be transferred as part of that transaction, subject to applicable law and notice requirements. We may share information when you direct us to do so.

We do not sell personal information or share it for cross-context behavioral advertising. Hoblets does not run targeted advertising.

5. Cookies and device permissions

We use cookies and similar local storage for sign-in, session security, preferences, and app functionality. Desktop and mobile apps also store session information on your device. Clearing or blocking this storage can sign you out or prevent features from working. Third-party sites opened inside your hosted computer have their own cookies and policies.

Camera, photo-library, file, microphone, and speech-recognition access is used when you choose the related feature and grant any required permission. You can change permissions in your device settings. Mobile dictation uses the operating system’s speech-recognition service, which may process audio remotely; our dictation feature does not save an audio recording. The resulting text becomes workspace content when you send it.

6. Storage, retention, and deletion

We retain information for as long as reasonably needed for the purposes described here. The period depends on the type of information, whether your account or workspace remains active, your deletion requests, operational and security needs, and applicable accounting, legal, or dispute-related requirements.

Your workspace is persistent. Canceling membership, uninstalling an app, or disconnecting an AI provider does not automatically delete your account, files, conversations, or memories. Use available in-app controls to manage content, or contact support@hoblets.com to request account or workspace deletion.

Deletion is not necessarily immediate across revision history, logs, backups, and connected services. We may retain limited records for legal obligations, security, fraud prevention, or disputes. Where a request cannot be fully completed, we will explain the applicable limitation. Content you independently shared with third parties may remain under their control.

We use measures such as encrypted network connections, access controls, and encrypted workspace volumes to help protect information. No service can guarantee absolute security. Keep your own copies of important files; workspace persistence is not a guarantee against data loss.

7. Your choices and privacy rights

You can update available account details, manage memories and routines, disconnect providers or plugins, and change device permissions. For access, correction, a copy of your data, or deletion, email support@hoblets.com from your account email where possible. We may request limited information to verify your identity or an authorized representative’s authority; do not send passwords or full payment-card details.

Depending on your location and applicable law, you may also have rights to restrict or object to processing, withdraw consent, receive a portable copy, limit certain uses of sensitive information, appeal a denied request, or complain to your local privacy regulator. We respond within applicable legal time limits and do not discriminate against you for exercising a protected right.

For California residents, the categories, sources, purposes, recipients, and retention criteria described in this policy also explain our handling of personal information under applicable California privacy law. We do not sell or share information for cross-context behavioral advertising, including sensitive information, so there is no such activity to opt out of. Browser opt-out signals do not disable essential account functionality.

8. International users

Hoblets is operated from the United States. Information may be processed in the United States and other countries where our providers operate; their laws may differ from those in your location. This policy does not promise storage in any particular country or constitute your consent to a transfer where another legal safeguard is required.

Where European or UK data-protection law applies, processing to provide the service is based on performing our contract with you; security, troubleshooting, and service administration rely on legitimate interests where appropriate; legally required processing relies on legal obligations; and processing that requires consent relies on that consent. You may contact us for information about a particular processing activity or any applicable transfer safeguards.

9. Children

Hoblets is intended for adults aged 18 or older and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact support@hoblets.com so we can investigate and address it.

10. Changes and contact

We may update this policy as the service or our practices change. We will update the effective date and provide additional notice of material changes when required. A new policy does not retroactively authorize materially different uses that require notice or consent.

For questions, privacy requests, or concerns, contact RETAILER LLC, the operator of Hoblets, at support@hoblets.com. Our Terms of Service explain the rules for using Hoblets.