Privacy Policy

StackAI (“we”, “us”) provides an AI coding agent available through a CLI, a web app, and an editor extension. This policy explains what we collect and why. We collect the minimum needed to run the service.

• Account info. When you sign in with X (Twitter), we receive your public profile: account ID, username, display name, and avatar URL.
• API keys. We store only a SHA-256 hash of each key plus a short prefix for display. The raw key is shown once at creation and never stored.
• Usage data. We count requests per key per day to enforce rate limits.
• Prompts & code. Content you send to the agent (your prompt and the file context needed for a request) is transmitted to our AI provider to generate a response. Vibe projects you create are stored in your browser; saved sessions may be stored on our servers if you opt to save them.

To authenticate you, enforce rate limits, generate agent responses, and operate and improve the service. We do not sell your personal data.

We share data only as needed with infrastructure providers that process it on our behalf: AI model providers (which may include OpenAI, Anthropic, Google, xAI, Xiaomi, and OpenRouter, depending on the model you or we select) to generate responses, Supabase (database & auth), Upstash (rate limiting), and our hosting providers (Vercel, Railway). If you bring your own API key, requests are routed directly to that provider. Each processes data only to provide their service.

The CLI runs the agent on your machine and only acts on files inside the directory you run it in. File contents are sent to the AI provider only as part of a request you initiate.

You can revoke an API key at any time from your dashboard, which stops all access tied to that key. To delete your account and associated data, contact us. Cached prompts and rate-limit counters expire automatically.

Questions about privacy? Reach us at hello@usestackai.com or @askstackai.