Privacy Policy

This Privacy Policy explains how XI GLOBAL, LLC, a Delaware limited liability company doing business as August (“August,” “we,” “us,” or “our”), collects, uses, discloses, and otherwise processes information relating to identified or identifiable individuals (“personal information”) in connection with our websites, desktop and mobile applications, account, relay, cloud execution, and model gateway services, and related services (collectively, the “Services”).

By accessing or using the Services, you acknowledge the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, do not use the Services.

The Short Version

• Local threads stay on your computer. When you run an agent against a folder on your device, your prompts, code, files, and conversation threads are processed and stored on that device. We do not receive or store them, and they are never synced to our servers.
• Your own model accounts. When an agent runs on your own subscription, login, or API key (for example Claude Code on your Anthropic account, or OpenCode with your own keys), your prompts and context go directly from your device to that provider under their terms, not through us.
• August models. When a thread runs on August’s models, requests pass through our model gateway to the model provider serving that model. We record metadata about each request (such as the model, token counts, and cost) to meter usage.
• Cloud threads. When you run a thread in the cloud, it executes in a sandbox we operate, against repositories you connect, and we store the thread so you can read it from any device, including while the sandbox is asleep.
• The relay. When you control a local thread from another device, such as the phone app, thread data passes through our relay in transit. The relay forwards this data and does not store it.
• Diagnostics and analytics. The desktop app sends crash and error reports with user content scrubbed, and our website uses analytics to understand visits.

The rest of this policy covers the details.

Scope

This Privacy Policy applies to personal information we process when you:

• visit our websites or landing pages;
• create an August account or connect devices to it;
• use our applications and the account, relay, cloud, and gateway features within them;
• connect a GitHub account or install the August GitHub App;
• communicate with us, including for support or administrative matters; or
• otherwise interact with us in a business or commercial context.

This Privacy Policy does not apply to third-party websites, services, or products that may be linked to, integrated with, or accessible through the Services, including the model providers and agent harnesses you use with your own accounts. Those third parties maintain their own terms and privacy practices.

Local Threads

The desktop app stores your local threads, settings, and working data on your device. Coding agents launched by August read and write files and run commands on your device, under the permissions you grant. This content is not transmitted to our servers, except in transit through the relay when you control a thread remotely, or through the model gateway when the thread runs on August’s models. If you delete the app and its data, local content is gone; we hold no copy.

The app interacts with your existing agent installations and their local credentials (for example an existing Claude Code login) so agents can run on your accounts. Those credentials stay on your device; we do not receive them.

The Relay

If you sign in to an August account and control a local thread from another device, thread events, commands, approvals, images, and related content are forwarded between your devices through our relay servers over encrypted connections. For local threads, the relay moves this data in real time and does not persist it. Your computer remains the system of record.

Cloud Threads

Cloud threads are a separate feature from local threads. When you start a cloud thread:

• the agent runs in an isolated sandbox that we provision for your account, on infrastructure we or our hosting providers operate;
• the sandbox clones the repositories you select and may push branches or open pull requests at your direction, using short-lived credentials issued by the August GitHub App;
• the sandbox disk, including your repository checkout and the agent’s session files, persists between runs so a thread can resume, until the thread is deleted; and
• the thread’s transcript, including your prompts, the agent’s responses, tool calls and their results, images, and related metadata, is stored in our database so you can read and continue it from any of your devices.

Cloud threads run on August’s models, so their model requests also pass through the model gateway described below.

GitHub

If you connect GitHub to use cloud threads, we store the GitHub account identifier and username, OAuth tokens for the August GitHub App, and the list of installations (accounts and organizations) the app can reach. We use the OAuth token to discover which installations belong to you. Repository access in sandboxes uses short-lived installation tokens scoped to the repositories you granted the app. You can revoke access at any time from your GitHub settings.

The Model Gateway

When a thread or other client uses August’s models, its requests are sent to our model gateway, which forwards them to the provider serving the selected model (for example Anthropic, Google Cloud Vertex AI, or another hosting provider) and streams the response back. Those providers process the content under their own terms as our service providers.

For each request, we record metadata including your account and API key identifiers, the thread and run identifiers, the model and provider, timing, status and error information, token counts, cost, the names (not the values) of top-level request fields, and the client software making the request. We use this to meter usage against your plan and credits, operate and debug the gateway, and understand usage of the Services.

Personal Information We Collect

Information You Provide Directly

• email address, name or username, and password or other sign-in credentials when you create an August account;
• device names and registrations associated with your account;
• content of cloud threads, as described above;
• information about your connected GitHub account, as described above; and
• messages you send us, such as support requests or waitlist requests, and any other information you choose to provide.

Information Collected Automatically

When you visit our websites or use the Services, we and our service providers may automatically collect:

• IP address, approximate geolocation derived from IP address, device identifiers, browser type, operating system, and network information;
• website usage data such as page views, session data, and interaction data, collected via analytics tools;
• gateway request metadata, as described above;
• connection and diagnostic logs for the account, relay, cloud, and gateway services, such as timestamps, connected device identifiers, and error information;
• crash and error reports from the desktop app, which include the app version, operating system, a random identifier for the installation, and technical details of the error. Before a report is sent, file paths are rewritten to remove your username and console logs are excluded, so that prompts, file contents, and thread content are not included; and
• requests made by the app for software updates (which necessarily include your IP address, received by us and our content delivery provider).

Information From Third Parties

We may receive limited information from service providers we use to operate the Services, such as authentication, hosting, analytics, and infrastructure providers, and from GitHub when you connect it.

How We Use Personal Information

We use personal information to:

• provide, operate, maintain, and improve the Services;
• create, administer, authenticate, and secure accounts and device connections;
• operate the relay, cloud sandboxes, and model gateway;
• meter usage and enforce plan limits and credit balances;
• deliver software updates and diagnose crashes and errors;
• understand how the website and Services are used and improve them;
• communicate with you regarding support, service updates, security notices, and administrative matters;
• detect, investigate, and prevent fraud, abuse, and security incidents;
• enforce our agreements, including our Terms of Service;
• comply with legal obligations, lawful requests, court orders, or regulatory requirements; and
• protect the rights, property, safety, and legitimate interests of August, our users, and others.

We do not use your prompts, code, or thread content to train AI models.

How We Disclose Personal Information

We do not sell personal information. We may disclose personal information:

• to vendors and service providers that perform services on our behalf, including hosting, infrastructure, model providers serving August’s models, error reporting, analytics, authentication, communications, and security services;
• to GitHub, when you direct a cloud thread to act on your repositories;
• to our professional advisors, auditors, insurers, financing sources, and potential investors or acquirers;
• in connection with an actual or proposed merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction; and
• when we believe disclosure is necessary or appropriate to comply with law, enforce our agreements, protect the Services, respond to security or fraud concerns, or protect the rights, property, or safety of August, our users, or others.

When an agent runs on your own model provider account, your prompts, code, and conversations are sent to that provider by the agent software running on your device, at your direction and under your own agreement with that provider. We are not a party to that exchange.

Cookies And Similar Technologies

Our websites use cookies, local storage, and similar technologies, including third-party analytics, to operate the site, keep you signed in across August’s websites, remember preferences, and understand usage. You may be able to control certain cookies through your browser settings, but disabling them may affect functionality.

Data Retention

We retain account information for as long as your account exists and as reasonably necessary afterwards to comply with legal obligations, resolve disputes, maintain security, and enforce our agreements. Cloud threads and their sandboxes are retained until you delete the thread or your account. Gateway request metadata and usage records are retained for as long as needed for metering, billing, and operating the Services. Relay traffic for local threads is forwarded, not stored. Website analytics, crash reports, and service logs are retained for limited periods appropriate to their purpose.

Data Security

We use commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information, including encrypted connections for relay and gateway traffic and isolated sandboxes for cloud threads. However, no security measure is perfect, and we cannot guarantee that unauthorized access, disclosure, alteration, or destruction will never occur. You are responsible for maintaining the confidentiality of your account credentials and for securing the devices on which you run August.

International Data Transfers

We and our service providers may process and store personal information in the United States and other jurisdictions that may have data protection laws different from those of your country of residence. By using the Services, you acknowledge that your personal information may be transferred to and processed in those jurisdictions, subject to applicable law.

Your Choices And Rights

Subject to applicable law, you may have the right to request access to, correction of, deletion of, or portability of certain personal information, or to object to or restrict certain processing. You can delete local app data yourself at any time, since it lives on your device, and you can delete cloud threads from the app.

To submit a privacy-related request, contact us at [email protected]. We may need to verify your identity before processing a request, and we may retain certain information where required or permitted by law.

Children’s Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, please contact us so that we may take appropriate steps.

Changes To This Privacy Policy

We may modify this Privacy Policy from time to time. If we make changes, we will post the updated version on this page and update the “last updated” date above. Changes will become effective upon posting unless otherwise stated. Your continued use of the Services after the effective date of an updated Privacy Policy constitutes your acknowledgment of the revised Privacy Policy.

Contact

August is operated by XI GLOBAL, LLC, the controller of the personal information described in this Privacy Policy. If you have questions about this Privacy Policy or our privacy practices, contact us at [email protected].