Privacy Policy

Effective November 1, 2026

Botmonger is an app for running AI agents that chat with you, carry out tasks, and use the services and computers you connect. It is operated by Dalton Solutions, LLC, Burleson, Texas, USA ("we", "us"). This policy explains what we collect, where it goes, how long we keep it, and how to delete it. Questions go to [email protected].

The short version

• We store your account, your chats and tasks, your agents' memories, and the files you share, so the app can work across your devices.
• Your agents run on your own AI provider keys (Anthropic, OpenAI, Google Gemini, OpenRouter). What you send an agent goes to the provider you chose, under your account with them.
• Connected services (such as Gmail, Google Calendar, Google Drive, GitHub, Slack, Atlassian and Zoom) are read or changed only when one of your agents needs to for something you asked, and only within the permissions you picked.
• We don't sell your data, show ads, or use your content or data from connected services to train AI models.
• Keys and sign-in tokens are encrypted at rest. You can disconnect anything, delete items, or delete your whole account in the app.

What we collect

Account

• Your email address, which is how you log in: we email you a one-time login link. Your display name starts as the part of your email before the @.
• Your time zone, so scheduled tasks run when you expect.
• Sign-in records for your devices (for example, when you log in on iPhone by scanning a code on your Mac).

What you create

• Chats: your messages, your agents' replies, reactions, and attachments you add (photos, documents and other files, including ones shared from other apps).
• Tasks: task instructions, checks, results, schedules, and the task activity log (each step an agent took, which tools it used, and what came back).
• Memories: facts your agents save so they remember things between conversations. You can view, edit and delete them under Settings → Memory.
• Agents: names, appearance, instructions, model choices, and which credentials and computers each agent may use.

Credentials you add

• AI provider API keys (Anthropic, OpenAI, Google Gemini, OpenRouter) and Boat cloud-computer keys.
• OAuth tokens for the services you connect, plus the permissions you granted and the account name or email they belong to.

Credentials are kept in credential vaults you control, encrypted at rest, and never shown back in full (we display only the last few characters). Your Anthropic key is also stored in Cloudflare's secrets store so long-running tasks can use it without our task runner ever holding it (see "Cloudflare" below).

Computers

If you set up the Mac helper or the browser extension, we store each computer's name and platform, which apps are open, which apps and browser profiles agents may use, its control settings, and the commands agents sent and their results (encrypted at rest).

Usage and technical data

• AI usage records: provider, model, token counts, steps and tool calls for each request, so we can show usage and enforce limits. These records don't contain your message content.
• Device and app information: platform, app version, and which app features your device supports.
• Server logs: IP address, requests, and errors, used to keep the service running and secure.

We don't use third-party analytics or advertising trackers in the app.

How features use your data, and who else sees it

AI providers, with your own keys

When an agent answers you or works on a task, we send the provider you chose what it needs: your message and the conversation so far, relevant attachments and memories, task instructions, and content from connected services or computers that the agent read for the task. Today that means:

• Anthropic: chat, long-running tasks, and web search.
• OpenRouter: chat and tasks when you pick an OpenRouter model. OpenRouter passes requests on to the model's provider.
• OpenAI: live voice, transcription, choosing which memories are relevant, and deciding whether a request needs a computer.
• Google Gemini: transcription and voice, if you add a Gemini key.

These requests are made under your account with that provider, so their terms and privacy policies govern what they do with them, including how long they keep them. We don't use your content to train models, and we don't ask providers to.

Cloudflare

• Long-running tasks run on Cloudflare Workers. Each task's conversation and working state is stored with that task on Cloudflare while it runs.
• Their model calls go through Cloudflare AI Gateway, which uses your Anthropic key from Cloudflare's secrets store. AI Gateway may log request metadata and content according to how the gateway is configured.
• Login emails are sent through Cloudflare's email service.

Boat cloud computers

If you connect Boat (boat.dev), agents can do work on cloud computers there. We send Boat the instructions, files and credentials the agent needs for that work, using your Boat connection. Boat's terms and privacy policy apply to what happens on those computers.

Mac helper

The Mac helper lets agents use apps on your Mac, only after you turn it on and grant macOS permissions:

• Accessibility lets it read the structure of windows in apps you allow (labels, values and positions of buttons, fields and menus) and send pointer and keyboard input to them. That window structure is sent to Botmonger and to your AI provider so the agent can decide what to do.
• Screen Recording, if you grant it, is used to read visible text in a window. Text recognition happens on your Mac; only the recognized text is sent, not the screenshot.
• Remote desktop streams your Mac's screen to your own signed-in devices over an encrypted WebRTC connection. It may be relayed through our TURN server when a direct connection isn't possible. We don't record or store the stream.

You choose which apps agents may use, and you can turn control off at any time in Settings → Computers or in macOS System Settings.

Browser extension

When you pair the Botmonger browser extension, agents can open tabs, read the content and structure of pages in the tabs they control, click, type, scroll, and upload files you allowed. The page content they read is sent to Botmonger and your AI provider. The extension works in Chrome profiles you allow, and you can remove it at any time.

Voice

• Dictation runs on your device using Apple's speech recognition, unless you choose to transcribe with your OpenAI or Gemini key, in which case the recording is sent to that provider.
• Live voice connects your device straight to OpenAI using your key. We keep a record of the session, and requests you make during the call may be saved to your chat.

Connected services

You connect each service yourself, choose its permissions, and can limit which agents may use it. We store the sign-in token and use it only when an agent needs it for something you asked. What the agent reads is sent to your AI provider and may appear in your chat and task history.

• Gmail: read and search messages; if you allow it, archive, label, mark read or unread, and move to Trash; if you allow it, send messages you ask for.
• Google Calendar: view calendars and events; if you allow it, create, update and delete events.
• Google Drive: search, view and download files and export Google documents as text; if you allow it, create files and edit files created through Botmonger.
• GitHub: read repositories, issues and pull requests through GitHub's read-only service.
• Slack: search your workspace, read channels and messages you can see, and post messages as you when you ask.
• Atlassian: read Jira issues and Confluence pages and spaces you can see.
• Zoom: find, schedule, update and cancel meetings; read cloud recordings and meeting notes; search your Zoom content; and work with Zoom Docs, Hub content and workflows, within the Zoom permissions you approve and the tools you turn on.
• Other connectors: services you add from the Connectors screen, or your own MCP servers. Each one works within the permissions you approve when you sign in, and agents can use only the tools you turn on.

When you connect a Google service we also receive your Google account's email address, to show which account is connected.

Google user data and Limited Use

Botmonger's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the features you use it for in Botmonger, such as an agent reading, organizing or sending email, managing events, or working with files at your request.
• We transfer it to others only as needed to provide those features (for example, to the AI provider you chose, using your key, so the agent can act on it), to comply with law, or as part of a merger or acquisition with notice to you.
• We don't use it for advertising, we don't sell it, and we don't use it to develop, improve or train generalized or non-personalized AI or machine-learning models.
• People at Botmonger don't read it unless you ask us to (for example, for support), it's needed for security or abuse investigations, or the law requires it; and then only with appropriate access controls.

Other sharing

We use service providers to host and run Botmonger (Hetzner, in Ashburn, Virginia, USA, and Cloudflare) under agreements that limit their use of your data to providing their service to us. We may disclose information if the law requires it, to protect people's safety or our rights, or as part of a merger or acquisition, in which case this policy continues to apply to your data. We don't sell personal information or share it for cross-context behavioral advertising.

Security

Data is sent over HTTPS. API keys, OAuth tokens and computer commands are encrypted at rest, and access to production systems is limited. No system is perfectly secure, so please use strong protection on your email account, since it's how you log in.

How long we keep it

• Your account, chats, tasks, memories, attachments and settings are kept until you delete them or your account.
• Clearing a conversation deletes its messages and attachments. Forgetting a memory deletes it.
• Disconnecting a service or removing a key deletes the stored token or key, including the copy in Cloudflare's secrets store. To fully revoke access you can also remove Botmonger in that service's own security settings.
• Server logs are kept for up to 14 days. Backups are kept for up to 30 days, after which deleted data is gone from them too.
• Copies held by your AI providers, Boat, or connected services are kept according to their policies.

Deleting your account

You can delete your account in the app under Settings → Delete Account. This deletes your account, agents, chats, tasks, memories, attachments, credentials and connected-service tokens, and signs out your devices. You can also email [email protected] from your account's address and we'll delete it for you.

Your choices and rights

You can see and change most of your data in the app. Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict some processing, and to complain to your data protection authority. To make a request, email [email protected]. We won't treat you differently for exercising these rights.

International transfers

We and our providers may process data in countries other than yours, including the United States. Where required, we use appropriate safeguards such as standard contractual clauses.

Children

Botmonger isn't intended for anyone under 16, and we don't knowingly collect their information. If you believe a child has given us information, contact us and we'll delete it.

Changes

We'll post updates here and change the effective date. If a change is significant, we'll tell you in the app or by email before it takes effect.

Contact

Dalton Solutions, LLC
Burleson, Texas, USA
[email protected]