Privacy policy

Who we are

sinep.dev is run by SPEED CONTROL s.r.o., IČO 02596733, Prokopa Velikého 606/32, 703 00 Ostrava-Vítkovice, Czech Republic, registered in the Commercial Register of the Regional Court in Ostrava, section C, file 58146 (“we”). We are the controller of the personal data described here.

For anything about your data, write to support@sinep.dev. If you only contacted us through this website, contact@sinep.dev works too.

The short version

• We keep what sinep.dev needs to work for you: your account, your workspaces and what you connect to them.
• No ads, no tracking, no analytics or advertising SDKs, on the website or in the apps. We don't sell or rent your data.
• Your data reaches another company only when you connect that company's service yourself, such as a chat service or an AI provider, or when it's needed to run sinep.dev, such as hosting and push notifications.
• We don't use your data to train AI models.

What the app keeps and why

• Account: your e-mail address, display name, an internal user id, and a password hash if you sign in with a password. If you sign in through your organization's single sign-on, we receive your e-mail and name from it. Needed to sign you in.
• Workspaces: the code, files and repositories you put in your workspaces, your terminal sessions and their recent screen contents, git history, and the settings, skills and instructions you configure for coding agents. This is the service itself.
• Credentials you add: SSH keys, forge tokens, cloud credentials and similar. They're stored encrypted, and copied into your workspaces only where you switch that on.
• Connected chat services (optional): if you connect Matrix, Slack, Microsoft Teams, Signal, Telegram, WhatsApp or Gmail, sinep.dev reads and sends messages in them on your behalf. Signal and WhatsApp messages are stored by sinep.dev itself, encrypted, for 90 days. The other services keep their own history; sinep.dev caches only what it needs.
• Jobs, decisions and notes: the jobs you set up, the questions your agents ask you and your answers. When you share a decision by link, the person who answers it sees only that question, and their name and answer are kept with it.
• Devices: push notification tokens for the browsers and phones you allow, so sinep.dev can tell you when an agent needs you.
• Usage records: an audit log of security-relevant actions, such as sign-ins and changes to accounts and credentials, with IP address and time, and a record of finished agent turns. We use these for security and for the activity view that only you see.

Legal basis (GDPR): performing our contract with you or your organization, Article 6(1)(b), and our legitimate interest in keeping the service secure, Article 6(1)(f).

AI

• Coding agents (Claude Code, Codex, OpenCode) run inside your own workspace and sign in with your accounts at those providers. What they send to their provider is governed by your agreement with that provider.
• Chat suggestions and job conditions are off until you switch them on. When they're on, sinep.dev sends the messages concerned to the AI connections you configured, such as LiteLLM, OpenRouter or Jev, to draft replies or to check a condition you wrote. Nothing is sent to a chat without your click, unless you separately allow sinep.dev to act without asking.

Dictation

When you dictate a prompt, speech is turned into text by your device's speech recognition (Apple's, or your browser's). sinep.dev receives only the text, and only when you send it to an agent.

This website and the contact form

• The contact form: your name, e-mail, company, team size, topic, message and the language of the page. We use them only to answer you and to prepare an offer you asked for. The legal basis is steps taken at your request before a contract, Article 6(1)(b) GDPR.
• E-mails you send to contact@sinep.dev or support@sinep.dev, to answer them.
• Server logs: your IP address, briefly, to keep the site running and to limit abuse of the form. The legal basis is our legitimate interest, Article 6(1)(f) GDPR.

This website uses no cookies, no analytics and no tracking. It remembers the language you picked in your browser's local storage, which never leaves your device.

Who processes data for us

• Hetzner Online GmbH hosts the servers, the website and the contact form's messages, in data centers in the European Union.
• Apple (the Apple Push Notification service) and your browser's push service deliver notifications. They carry short texts, such as an agent's name and that it's waiting for you.
• Cloudflare, Inc. receives e-mail for the sinep.dev addresses and forwards it to us.
• Resend, Inc. delivers the contact form's messages to our mailbox.
• The services you connect yourself (chat services, AI providers, git forges, cloud accounts) receive what you direct sinep.dev to send them.

Transfers outside the EU rely on the EU Commission's standard contractual clauses or the EU–US Data Privacy Framework.

How long we keep it

• Your account and workspaces: until you or your organization's admin deletes them.
• Signal and WhatsApp messages: 90 days.
• The audit log: as long as the account exists. After that, an anonymised record remains, so past security events stay traceable.
• Messages from the contact form: deleted automatically one year after you send them. If you become a customer, what we need for the contract is kept as the law requires.

Your rights

You may ask for a copy of your data, its correction or deletion, a restriction of its processing, or an export in a common format. You may also object to processing based on our legitimate interest. Write to support@sinep.dev. We answer within one month. You can also complain to a data protection authority; in the Czech Republic that is the Office for Personal Data Protection (ÚOOÚ), www.uoou.cz.

To delete your account, ask your organization's sinep.dev admin or write to us. You can disconnect a chat service or an AI connection in Settings at any time; sinep.dev then stops using it.

Security

Every workspace runs in its own isolated virtual machine. Credentials and message stores are encrypted at rest, and all traffic uses HTTPS.

Children

sinep.dev is a tool for developers and their teams, not meant for children under 16.

Changes

When this policy changes, the date at the top changes. For significant changes, we'll tell you in the app.