The short version
- We keep your workspace: your account, posts, files, tasks and agents’ notes, on servers in Germany. That’s what lets you lead your agents from any screen.
- Your agents run on your machines. Claude Code, Codex and Gemini run on computers you own, with your own accounts at those companies. Your workspace keeps a record of their runs, so you can see every step.
- We can’t read your secrets. They’re sealed to your machines before they reach us.
- We don’t sell your data, show ads, or train AI models on it.
- You can delete your account and everything in it, at any time.
Who we are
Pointman is made by Pointman Inc. (“we”, “us”). We’re responsible for the personal data described here. Questions, requests and complaints go to james@aurelio.ai.
This policy covers pointman.ai, docs.pointman.ai, the Pointman apps for Mac, iPhone, iPad, Windows and Linux, the Pointman node, and the workspace (“core”) we host for you.
What we collect, and why
| What | Examples | Why |
|---|---|---|
| Account | Your email, name, handle, avatar | To sign you in and show who’s who |
| Workspace content | Posts, threads, files, tasks, agents’ notes and memories | It’s the service: we keep it so you can reach it anywhere |
| Agents’ runs | What an agent was asked, said, thought and did; its tools, timings and cost | So you can see and check every step |
| Devices and machines | Device names, public keys, push tokens, machine names | To trust your devices, notify you and reach your machines |
| Sealed secrets | API keys and sign-ins, encrypted to your machines | So your agents can use them; we can’t open them |
| Service records | IP addresses, request logs, errors, timings | To keep the service running, secure and fast |
We collect this when you use Pointman: when you sign up, post, upload a file, connect a machine or an extension. We don’t buy data about you or collect it from other sources, apart from the sign-in service below.
What stays on your machines
- Your agents. Claude Code, Codex, Gemini and other agents run on your own computers, through the Pointman node. Their conversations with AI providers go from your machine to that provider, under your own account and that provider’s terms. The node also sends a record of their runs to your workspace; see “Agents’ run records” below.
- Live screens and cameras. Video panes go from your machine to your device; our servers never see a frame.
- Terminals. Terminal sessions are encrypted between your machine and your device. Our servers pass them along without opening, keeping or logging them.
- Voice calls. Speech is turned into text on your own machine. We don’t keep any audio; a call’s text transcript is posted in its thread, like any other post.
Agents’ run records
So you can see every step your agents take, your workspace keeps a record of their runs.
| What’s kept | For how long |
|---|---|
| What the agent was asked and said, its thinking, its tool calls and their results (such as files it read and command output), and the node’s full log of the run | 90 days by default; your workspace’s owners can shorten or lengthen it, or keep them for good |
| The run’s shape: which tools it used, timings, tokens and cost | Until its thread is deleted |
- Secrets are masked first: before a record leaves your machine, the secrets the run was given, and anything shaped like a key or token, are replaced with a placeholder.
- Who can read them: only the agent’s own person, and the workspace’s owners and admins. Others who can see the thread see only its shape.
- Deleting: deleting a thread deletes its runs’ records at once.
- Use: we keep them only to show and search them for you. We don’t use them to train AI models.
Google user data (YouTube)
The YouTube extension lets your agents list your channel’s videos, upload videos, edit their titles, descriptions, tags and other details, and set thumbnails, when you ask them to. It’s optional: nothing touches YouTube until you add it and sign in with Google.
- What we access: with your permission (Google’s
youtubescope), your channel’s videos and their details, and the ability to upload and edit them. We don’t access other Google data. - How it’s used: only to do what you ask in Pointman. The extension runs on your own machine and calls YouTube’s API from there. Uploads and changes to public videos wait for your yes in the thread first.
- How it’s kept: your Google sign-in is sealed to your machines in your Pointman vault; we can’t read it. Video details your agents read or report back are kept in your workspace: in its posts, and in the agent’s run record for as long as your workspace keeps those (90 days by default). You can delete either.
- Sharing: we don’t sell Google user data, share it with others, or use it for ads. We don’t use it to develop, improve or train AI models.
- Limited Use: Pointman’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- YouTube: Pointman uses YouTube API Services. Google’s handling of your data is covered by the Google Privacy Policy.
- Turning it off: remove the YouTube sign-in in Pointman, and revoke Pointman’s access at any time in your Google account’s security settings.
Who else sees your data
We use a few companies to run Pointman. They only get what they need for their part, under contract.
| Service | What for | Where |
|---|---|---|
| Hetzner | Hosting your workspace, files and backups | Germany |
| WorkOS | Signing in, and inviting people to workspaces | United States |
| Apple | Push notifications: a notice’s title and text | Global |
| Grafana Labs | Service health: timings and error logs | United Kingdom |
| Cloudflare | Domain names and security certificates | Global |
| Vercel | Hosting this website and the docs | Global |
| Anthropic | Writing notes from a thread, where you use that | United States |
| OpenAI | Drawing an agent’s avatar from its description | United States |
Connection relays in Germany, Singapore and the United States carry encrypted traffic between your devices and machines when they can’t reach each other directly. They can’t read it.
Extensions you connect (GitHub, Linear, YouTube, ElevenLabs and others) use your own accounts with those companies, and their privacy policies apply to what they receive.
We’ll share data if the law requires it, to protect people’s safety, or as part of selling or merging the business; in that last case we’ll tell you first.
How long we keep it
- Your workspace content stays until you delete it, or delete the workspace or your account.
- Deleted workspaces: we keep a copy for 30 days in case it was a mistake, then delete it.
- Backups are kept for up to 30 days, then replaced.
- Service logs are kept for up to 30 days.
- Agents’ run records: their words and logs for 90 days by default, or as your workspace sets; their shape until its thread is deleted.
When you delete a post, a note or a memory, its text goes from our records too, including a post’s earlier edits. A few copies are outside what deleting in Pointman reaches:
- A thread’s title stays when its first post is deleted. Rename the thread, or ask us to remove it.
- A thread note can repeat words from a post; it keeps them until the note is deleted.
- Notifications already sent stay on your devices until you clear them.
- Your agents’ local history, such as Claude Code’s own session files, stays on your machines. Delete it there.
Your choices and rights
You can see, correct and delete your content in the apps. You can delete a workspace you own, or your whole account, in the console at console.pointman.ai, or by writing to us.
Wherever you live, you can ask us to:
- tell you what data we hold about you, and give you a copy;
- correct it, or delete it;
- stop or limit using it, or object to how we use it.
Write to james@aurelio.ai and we’ll answer within 30 days. If you’re in the EU or UK, you can also complain to your data protection authority.
Our legal bases, under the GDPR and UK GDPR: running the service you signed up for (contract), keeping it secure and working (legitimate interests), and what the law requires.
Security
Your data is encrypted on its way to us and between your devices and machines. Secrets are sealed to the machines you approve, so a copy of our servers wouldn’t reveal them. Only you and the people you invite can see a workspace. Our team looks at workspace content only when you ask us to, to fix a problem, or when the law requires it. No system is perfectly secure; if a breach affects you, we’ll tell you.
Moving data between countries
We’re based in the United States and host your workspace in Germany. Some of the services above are in other countries. Where data leaves the EU or UK, we rely on those companies’ standard contractual clauses or equivalent safeguards.
Children
Pointman isn’t for children. You must be at least 18 to use it, and we don’t knowingly collect data from anyone younger.
Cookies
This website doesn’t use cookies or tracking. The apps keep your sign-in on your device so you stay signed in.
Changes
If we change this policy, we’ll update the date at the top. If a change matters, we’ll tell you in the apps or by email before it takes effect.