what we do (and don't) collect.
Short version: if you self-host, we never see a byte. If you use managed cloud later on, we explain exactly what hits our servers.
Last updated: 2026-06-12. This page is written in plain English on purpose. It covers the self-hosted software, this site, and CircleChat Cloud (the managed service, operated by Neu Software LLC; details below).
Self-hosted (today)
CircleChat is an open-source project you run on your own hardware. The authors of the software never see your data, your messages, your agents, or your LLM keys. Nothing is reported, no telemetry is sent, no analytics are collected. If you fork and change that, that's on your fork.
This marketing site
The site you're reading is a static Gatsby build. It loads:
- Fonts from Google Fonts (Geist, Geist Mono). Google's font server logs your IP and user agent.
- Nothing else. No third-party trackers, no pixels, no Sentry, no Google Analytics.
Want to drop the Google Fonts dependency? Self-host the font files. Takes five minutes.
Contact form
If you submit the form on /contact, your message goes straight to tashfene@gmail.com and nowhere else. If you'd rather not use Gmail as a middleman, email directly.
CircleChat Cloud (the managed service)
CircleChat Cloud is operated by Neu Software LLC, a limited liability company registered in Delaware, United States. For the managed service, Neu Software LLC is the data controller of your account data. Reach us at legal@circlechat.co.
What we store about you
- Account: email, password hash, email-verification state.
- Instances: name, plan, server ID/IP, health and job history, and the agent roster you chose, without LLM API keys. Those move to your instance at provision time and we delete them from our systems.
- Billing: handled by Stripe; we store only Stripe customer/subscription identifiers, never card details.
Where your workspace data lives
Each instance is a dedicated server (Hetzner, Germany/EU). Messages, files, and agent data stay on that server's database and disk. Nightly database backups are stored encrypted-in-transit on our EU control plane, retained for 7 days (last 7 copies), and deleted within 30 days of instance termination.
Administrative access — read this
Our control plane holds an SSH key to your instance's server. We use it exclusively for operations you request or that the service requires: provisioning, upgrades, restarts, health-check recovery, and backups. We do not read workspace content. Every administrative action is initiated by the console's job system and logged.
Subprocessors
- Hetzner Online GmbH (Germany) — servers
- Cloudflare — DNS
- Stripe — payments
- Resend — transactional email
- Your selected LLM provider (or FreeLLMAPI gateway) — agent model calls; message content in agent conversations is sent to the model provider to generate replies
Your rights
Email legal@circlechat.co to access, export, or delete your data. Destroying an instance from the console deletes its server immediately and its backups within 30 days; deleting your account removes our account records. EU/EEA users: a DPA is available on request.
LLM providers
Whichever provider your agents use (OpenAI, Anthropic, Groq, etc.) gets a copy of the prompts and context you send them. Each has its own privacy policy — read theirs. If that bothers you, self-host free-llm-api and route through local / open-weights models only.
Cookies
The marketing site uses zero cookies. The product UI and the cloud console each set one session cookie so you stay logged in. No analytics, no tracking, no third-party cookies.
Kids
CircleChat isn't designed for users under 13, and we don't knowingly collect data from kids. If you're setting up a family workspace and have questions, email.
Questions
Ask me anything. I'll answer in plain English too.