Privacy Policy

This policy explains what personal data the Cockpit website processes, why it is processed, who it is shared with, and how to exercise your rights under Brazil's General Data Protection Law (Law No. 13,709/2018, or LGPD).

Effective from October 15, 2026

Who we are

Cockpit is a VEP product. VEP is the trading name; the service is operated by the legal entity 21.903.575 Jonathas Antonio Santos Costa, CNPJ (Brazilian company tax ID) 21.903.575/0001-94, address: no physical premises open to the public; support is provided exclusively online through the contact email. This entity is the controller of the data processed on this website.

For privacy-related matters, contact gruposaht@gmail.com.

What stays on your computer

Cockpit is an application that runs on your computer. Your projects, conversations, files, and mission history stay in folders on your computer and are not sent to our website. API keys you add to the application are encrypted (AES-256-GCM) on your computer. The key that protects them is stored in Keychain on macOS or protected by Windows DPAPI. On Linux and WSL2, it is stored in a file with restricted permissions, as the application does not use a system keyring on those platforms.

Canceling your subscription or deleting your account does not delete these files, because we do not have them.

The application only communicates with our website to activate and renew its license and, alongside that signal, send the usage statistics described below, which you can disable. We found no other telemetry or error reports sent to us by the application.

Data we process on this website

Data	Source	Notes
Account email	You, when signing up or signing in with Google	Identifies your account. We also store when it was verified and when your trial ends.
Name	Google, when you sign in, or you, at checkout	Helps our support team know who they are speaking with.
Sign-in code	Generated by us when you request email sign-in	Six digits, valid for 10 minutes and a single use. We store only a cryptographic signature (HMAC), not the code itself.
Session	Your browser, when signing in	We store a signature of the token, its validity period (30 days), and the browser identifier (user-agent, up to 200 characters).
Activation keys	You, in the dashboard	We store the name you assign, a prefix to identify it, and a cryptographic signature. The full key is shown only when it is created.
Activated computers	The application, when activating and renewing the license	The application generates a random identifier and sends it with the key, the computer name and Cockpit version. We store a signature of the identifier, the computer name, and the version to enforce plan limits and let you identify and remove computers in the dashboard.
Subscription	Stripe	Plan, status, end of the paid period, scheduled cancellation status, and Stripe customer identifier.
Billing details	You, at Stripe checkout	Name, CPF or CNPJ (Brazilian tax ID), billing address, and phone number, requested when subscribing to issue tax invoices and contact you about your account. We store a copy with your account.
Customer relationship	Our team	Support notes, company, how you heard about Cockpit, the team member responsible for the account, and the date of the next agreed follow-up.
Concurrent sessions	The application, every few minutes while open	A random instance identifier, computer name, and time of the last heartbeat, used to count open instances and enforce the account's plan limit.
Cockpit usage statistics	The application, with the session heartbeat	Daily time with Cockpit open and counts: how many projects and missions exist, how many agents are open at once, and their types (for example, Claude Code or Codex). Never project names, paths, conversations, or code. You can disable this in Settings › License in Cockpit.
Visit source	Your browser, on your first visit	The referring website, landing page, and campaign parameters (utm) from the link, stored in a cookie for 90 days and associated with your account when you sign up.
Website browsing (Google Analytics)	Your browser, only if you accept analytics cookies	Pages viewed, clicks on external links, scrolling, form interactions, visit source, device and browser type, and approximate location, collected by Google through the cookies `_ga`. This excludes the dashboard and administration area.
Downloads and purchase intent	Us	When you download an installer or open checkout without completing it, along with the date and plan.
Technical access logs	Your connection, on Cloudflare	Method, requested URL (without query parameters), response status, and time of each website request, for diagnostics. Cloudflare may also log your IP address.
Account event log	Us	Sign-ins, account creation, key creation and revocation, computer removal, computer limit reached, and subscription changes, with dates.
Attempt limits	Your connection	Your IP address and email are used to limit repeated requests for codes, sign-ins, and activations, and prevent abuse.

We do not receive or store your card details: payment takes place through Stripe.

Purposes and legal bases

Create and maintain your account, issue keys and licenses, and enforce plan limits. Legal basis: performance of a contract (LGPD, Art. 7, V).
Charge for and manage your subscription and the 7 -day trial. Legal basis: performance of a contract.
Send your sign-in code by email. Legal basis: performance of a contract.
Issue tax invoices using your name, CPF or CNPJ, and address. Legal basis: legal obligation (Art. 7, II).
Support and follow up on your account (support, agreed follow-ups, team notes). Legal bases: performance of a contract and legitimate interests (Art. 7, V and IX).
Understand how Cockpit is used and offer help (usage statistics, visit source, and steps from sign-up to subscription, to improve the product and reach people who appear stuck or have payment issues). Legal basis: legitimate interests (Art. 7, IX). You can disable usage statistics in the application and object by contacting us below.
Measure website usage with Google Analytics, only after you accept the cookie notice. Legal basis: consent (Art. 7, I), which you can withdraw at any time using the Cookies link in the footer.
Protect the service from abuse and fraud (attempt limits, event logs). Legal basis: legitimate interests (Art. 7, IX).
Meet legal and tax obligations and exercise rights in legal proceedings. Legal bases: legal obligations and the regular exercise of rights (Art. 7, II and VI).

We do not sell personal data or use your data for advertising. Our team sees an account usage score only to identify who may need help; it does not independently make decisions about you, your access, or your pricing.

Signing in with Google

If you choose Google sign-in, we request only the scopes openid, email and profile. We receive your email address, whether Google has verified it, and your name. We do not store your photo or access contacts, calendars, Drive, or any other Google account data. We do not retain Google tokens after sign-in.

Use and transfer to other applications of information received from Google APIs comply with the Google API Services User Data Policy, including its Limited Use requirements. We use your email to identify your account and your name for support, and do not share them for other purposes.

To stop using Google with Cockpit, remove access in your Google account's security settings and sign in using an emailed code.

Who else receives data

We use third-party services to operate the website. Each receives only what it needs:

Stripe: processes payments and stores billing information. Receives your email and collects your name, CPF or CNPJ, address, and phone number at checkout.
Resend: sends emails containing sign-in codes. Receives your email and the code.
Google: authenticates people who choose Google sign-in and, if you accept analytics cookies, measures website use (Google Analytics), including IP addresses and browser data.
Cloudflare: hosts and delivers the website and activation interface.
Neon: hosts the database containing account data.

We may be required to disclose data by an order from a competent authority.

AI and services you connect

When you connect AI in the application (through sign-in, an API key, or a local model), the application sends your requests directly to your chosen provider, under that provider's terms and privacy policy. This does not pass through us. The same applies to optional features using your own keys, such as Telegram, voice and media services, the Jev connector, and any MCP connectors you add. The application also checks the public npm registry for updates to installed AI CLIs.

A mission supports up to 16 AI agents working together, on any plan. This limit is enforced locally through the license.

International transfers

Some of the services above are provided by foreign companies and may process data outside Brazil. Account data is stored in Neon's database in the AWS South America region (São Paulo, Brazil). Stripe, Google, Cloudflare, Resend, and Neon are foreign companies and may process data outside Brazil. This transfer is necessary to perform our contract with you (LGPD, Art. 33, IX).

How long we keep data

Account, keys, and computers: kept for as long as the account exists. Deleted immediately when you delete the account.
Sign-in sessions: expire after 30 days; expired sessions are deleted.
Sign-in codes: are valid for 10 minutes; expired or used codes are deleted.
Concurrent Cockpit sessions: the slot expires 10 minutes after the last heartbeat and is deleted.
Attempt limits (IP or email): counters last up to 1 hour and are then deleted.
Server access logs (Cloudflare): retained by Cloudflare for no more than 7 days, without URL query parameters.
Database history (Neon): up to 6 hours, for recovery. Deleted data may remain in this history during that period.
Account event log: deleted by the cleanup routine after 180 days. When you delete your account, the link to you is removed immediately. Records may be retained longer where required by law or a specific obligation.
Billing: invoices and payment records are retained by Stripe and us for the legally required period: billing and tax records are retained for the period required by applicable tax and accounting legislation, solely for that purpose.

Your rights

Under the LGPD (Art. 18), you may request confirmation of processing; access; correction; anonymization, blocking, or deletion of unnecessary data; portability; information about sharing; deletion of data processed on the basis of consent; and review of decisions. You may also lodge a complaint with Brazil's National Data Protection Authority (ANPD).

To exercise any right, including delete your account, contact gruposaht@gmail.com from your registered email address. We aim to respond within 15 days; statutory deadlines take precedence. From the dashboard, you can already revoke activation keys, remove computers, cancel your subscription, and delete your account at any time.

Deleting your account ends your license and immediately deletes your account, keys, computers, and website sessions. If you have an active paid period, you can choose deletion at its end (renewal is canceled immediately) or immediate deletion (the subscription is canceled immediately, with no automatic refund; withdrawal and refund rights still apply and must be requested beforehand). You can also download your data as JSON from the dashboard. Invoices and billing records follow the retention periods above. Files on your computer are unaffected.

Security

We store only cryptographic signatures of codes, session tokens, and activation keys, not the original values. Licenses are digitally signed (Ed25519) and valid only for the requesting computer. The session uses a cookie protected from script access. No system is immune to failures; if an incident could pose a significant risk to you, we will notify you and the ANPD as required by law.

Cookies and browser storage

Your language preference is stored in the cookie cockpit_locale, for up to one year. The currency is determined automatically using the approximate country provided by Cloudflare: Brazilian reais in Brazil and US dollars in all other countries.

We use a small number of cookies. First-party cookies include a session cookie (ck_session) that keeps you signed in, a temporary cookie (ck_oauth, up to 10 minutes) used during Google sign-in, and a first-party attribution cookie (ck_ft, 90 days) containing the referring website, landing page, and campaign parameters, written once on your first visit.

Only if you accept the cookie notice do we also use Google Analytics (cookies _ga and _ga_*, up to 2 years) to count visits and understand which pages, links, and forms are used. Advertising signals are disabled, and the dashboard and administration area are excluded. If you decline, nothing is sent to Google. You can change your choice at any time through the Cookieslink in the footer. Declining after accepting deletes those cookies. The website does not use advertising cookies.

Minors

Cockpit is intended for people aged at least 18 years. If we learn that we have processed a minor's data without the required authorization, we will delete it.

If you live outside Brazil

This policy is based on the LGPD. If you live in another country, local law may grant additional rights. Contact us below and we will assess your request under applicable law.

Policy changes and transfer of operations

We may update this policy. The effective date above identifies the current version. We will notify you of significant changes by email or through the dashboard.

If Cockpit's operations transfer to another company, we will inform you, identify the new controller in this policy, and preserve your rights.

Contact

21.903.575 Jonathas Antonio Santos Costa, CNPJ (Brazilian company tax ID) 21.903.575/0001-94. Address: no physical premises open to the public; support is provided exclusively online through the contact email. Email: gruposaht@gmail.com.