Skip to content

Privacy

Privacy Policy

Bossanova is local-first. This page explains what the website and optional services collect, and what the local software does not collect unless you turn it on.

Last updated: May 14, 2026

Short version

  • We use product analytics to understand which pages and features are useful.
  • The hosted web app may record pageviews, clicks, form interactions, and account-linked product events for support and feature measurement.
  • Local Bossanova services do not send telemetry unless you explicitly enable it.
  • Agent session content is yours. We treat live cloud session streams as transit data.
  • We do not sell personal information.
  • Your code, prompts, repositories, and outputs stay yours.

Who this policy covers

This Privacy Policy describes how Bossanova handles information when you visit the Bossanova marketing website, contact us, use hosted Bossanova web services, or enable optional telemetry in local Bossanova software.

For privacy questions, contact [email protected].

Information we collect

Website and product analytics. The marketing website and hosted web app may collect pageviews, clicks, form interactions, referrer information, browser and device details, approximate location derived from network information, timestamps, and product events. We use PostHog through a first-party Bossanova analytics host to understand which pages and features are useful, debug user issues, and improve onboarding.

Account-linked analytics. When you sign in or sign up for hosted services, we may identify analytics events with your account so we can understand the funnel from marketing visit to product usage and provide support. We do not use analytics events to inspect your code, prompts, repository contents, or live session transcripts.

Information you provide. If you email us, request support, submit a bug report, join a waitlist, or start a hosted service flow, we collect the information you choose to provide, such as your email address, message content, and related diagnostic context.

Optional local telemetry. Local Bossanova services do not send telemetry unless you explicitly enable it. If enabled, local telemetry may include product events such as command names, command status, daemon start events, session or chat creation events, repair status, authentication changes, and bug report identifiers. It is intended to measure product health, not to collect repository contents.

Cloud services. If you use optional hosted or cloud features, we may process account, authentication, billing, usage, support, and service data needed to provide those features.

Data residency

All Bossanova services are hosted in the European Union, and all service data is stored in the European Union. More information on our infrastructure as it relates to privacy is available on request.

Coding sessions and cloud views

Bossanova coding sessions run in the harness you choose: local worktrees on machines you control, or isolated cloud sandboxes when you choose cloud agents. Bossanova Cloud is a control plane and viewer for those sessions.

When you use cloud or web attach features, session metadata and live session stream data may pass through Bossanova services so the browser can show the session. We treat live session output as transit data. We do not inspect it, sell it, use it for analytics, use it to train models, or store session transcripts as application data.

We process session stream data only to route it and display it to you. We have never provided session stream data to law enforcement or external parties.

Information we do not want

Do not send secrets, credentials, private keys, sensitive personal data, or confidential third-party information through support channels unless we have specifically asked for it and agreed on a safe transfer method.

How we use information

We use information to operate Bossanova, improve website and product quality, respond to support requests, investigate abuse or security issues, maintain billing and account systems, and comply with legal obligations.

We do not sell personal information. We do not use private repository contents to train models. Bossanova works with third-party coding-agent tools you choose to run, and those tools may have their own privacy terms.

How we share information

We share information with service providers that help us run Bossanova, such as hosting, analytics, email, payment, security, support, and infrastructure providers. We may also share information if required by law, to protect rights and safety, or as part of a merger, acquisition, financing, or similar business transaction.

Retention and choices

We keep information for as long as needed to provide the service, maintain records, resolve disputes, improve reliability, and meet legal obligations. You can use browser controls to limit cookies and local storage. You can disable optional local telemetry in Bossanova settings.

You can ask to access, correct, delete, or export personal information by emailing [email protected]. We may need to verify your request before acting on it.

Children

Bossanova is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes

We may update this policy as Bossanova changes. If we make material changes, we will update the date above and, when appropriate, provide additional notice.