Legal
Privacy Policy
Last updated October 20, 2026
Who we are
Proxy is an AI teammate that joins your meetings, answers questions grounded in your codebase, and drafts follow-up work. This policy explains what data we process, why, and the controls you have. It covers useproxy.co and the Proxy service. Your company (the customer) is the data controller; Proxy is the processor acting on your instructions.
What we process
- Account & identity — your name, work email, and organization domain, from Google sign-in, to create and secure your account.
- Connected-service metadata — the repositories, channels, and calendars you connect. The access tokens for them are held by Nango, our credential store (encrypted at rest with AES-256-GCM), never in our own database; the work's sandbox receives only short-lived, scoped credentials from Nango, and our infrastructure keys never enter a sandbox.
- Meeting content — while Proxy is in a live meeting, it consumes the audio and transcript stream to respond. We do not keep the audio. The transcript and the notes, action items and artifacts made from it are kept for your company's retention period (30 days unless you set 7 to 90), then permanently deleted. Recall, which carries the meeting's audio, is set to keep nothing.
- Work product — meeting notes, answers, and drafted changes (e.g. pull requests) Proxy produces, stored to your tenant so your team can review them.
- Operational logs — errors, usage, and cost metering, tagged to your tenant, to run and bill the service.
How we use it
Solely to provide the service: to answer in meetings grounded in your code, to produce the notes and drafts you ask for, to secure and meter usage, and to support you. We do not sell your data, and we do not train foundation models on your content.
Data retention & isolation
- Every customer is isolated: separate per-tenant storage and a separate per-meeting sandbox. One company's data is never shared with another.
- The live audio stream is consumed in the moment and not kept.
- A meeting's transcript, notes, action items, threads and published artifacts are deleted automatically once the meeting is older than your company's retention period — 30 days by default, 7 to 90 by setting — by a job that runs every night. Records of usage and an audit trail (who did what, and when; never what was said) are kept.
- Everything else persists until you delete it or offboard, at which point it is purged.
- Proxy sends only through one outbound path that redacts, budgets and records every message, and opens a pull request or an issue only after the yes of the person it acts for; it pushes only to its own branches and never merges.
Sub-processors
We rely on a small set of vendors to deliver the service: Google Cloud (hosting, database and storage, in the United States), Anthropic (the Claude models) and Google (Gemini: live conversation in meetings, research, images, and a backup voice), Nango (the credential store that holds every access token we are given — your installs, each person's own connections, and your test keys; none is kept in our own database), Recall (joining meetings and carrying audio, with zero retention at Recall), AssemblyAI (speech-to-text, through Recall), Cartesia (Proxy's voice), E2B (isolated sandboxes), Browser Use (browsers Proxy opens for a task), Exa (web search and reading public pages for research), Resend (email), Stripe (payments), and Sentry (error monitoring). Each processes data only to perform its function. A current list is available on request.
Security
Least-privilege, revocable scopes on everything we connect. Our own secrets live in a managed secret store, never in code, and never enter a sandbox. Every access token you give us is held by Nango; a sandbox receives only short-lived, scoped credentials from it for the work at hand. Everything Proxy sends goes through one outbound path that redacts, budgets and records it, and acts that change something — a pull request, an issue — wait for the yes of the person they are for.
Your rights & choices
You can disconnect any integration, revoke access, export your notes, or delete your organization's data at any time from the console, or by emailing us. We honor access, correction, and deletion requests as required by applicable law.
Contact
Questions or requests: privacy@useproxy.co.
This page describes our current practices and will evolve as the product does. It is provided for transparency and is not a substitute for the data-processing agreement (DPA) your organization signs with us.