Privacy Policy

Who this is about

Woodor.AI is a website and brand operated by OMI OPTICS USA LLC. This page covers the Woodor.AI site, the Agent Fleet and AWD software you install, and the cloud relay that paid Agent Fleet tiers use. Write to [email protected] about anything on this page.

AWD stays on your Mac

AWD needs no account and contains no telemetry, analytics, or crash-reporting code. It does not send us your terminal contents, screenshots, project names, window titles, usage, or configuration. Its projects, preferences, window membership, and recovery journal are kept locally on your Mac.

The only internet request AWD itself makes is when you press Check for updates. It then reads a public release manifest from our download site. If a newer version is available and you choose to download it, macOS opens the disk image link in your browser. Cloudflare may process ordinary connection information such as your IP address and browser or app user agent when it delivers the manifest, website, or download.

On the free tier, nothing reaches us

The free tier needs no account and no sign-up. Your messages travel to the one machine on your own network that hosts the message server and stop there. They do not pass through us, and we have nowhere to put them if they did.

The one thing the free client reaches over the internet is the download site — to install itself and to check whether a newer version exists.

Files behave the same way: they go to the machine that hosts your message server and stop there. With no account there is no account key, so on the free tier a file crosses your own network unencrypted.

What we can see, and what we cannot

On paid tiers, messages from agents on separate networks pass through our relay. A message is encrypted on the machine that sends it, before it leaves, and decrypted on the machine that receives it. Agents on one network still reach each other without us.

We cannot see

• The contents of your messages. We never hold the key that would open them.
• The content keys themselves, or any machine's private key.
• Your recovery code.
• Your licence key. We keep a hash of it and the masked form you see on your account page, and nothing else.

We can see

Every message carries an envelope, and the envelope is not encrypted — the relay reads it to know where the message goes, which other sessions are in the group, and when it may be deleted. The envelope holds which of your agent sessions sent to which — the project name and the session name — along with the time, the sequence number, the group name, the kind of message, and how long the message body is.

Files

A file is encrypted on the machine that sends it, with the same account key as your messages, and we never hold that key either. What the relay is told in the clear is the file's name, its size, a checksum of it, which of your sessions sent it to which, and when.

So we cannot open a file you send, but we can see what it is called.

What we hold about your account and your machines

• Your order email, from your Shopify order. We use it to send you a licence key and to find your subscription when you write to us.
• Your plan, its expiry date, and your Shopify customer number.
• For each activated machine: its credential, a hash of its hardware identifier, the name you gave it, and when it was activated. The hardware identifier itself never leaves your machine.
• Each machine's public key, and copies of your content keys wrapped so that only those machines can open them. Wrapped is the operative word: we store them, we cannot open them.

The recovery code

We hold one copy of your content key encrypted with your recovery code — encrypted, meaning we cannot open it. The key itself, in the form that would open your messages, never leaves your own machines. That copy is what lets you read your history again after losing a machine.

How long things are kept

Message ciphertext and its envelope are currently kept for 30 days on Plus, counted from when each message was sent, and then deleted. This retention period is a setting rather than a promise: if we change it, this page changes with it.

File bytes are not on the same clock as messages. We delete them as soon as the receiving machine has taken them. A file nobody collects is deleted seven days after it was sent, together with what we were told about it.

Your order email and licence records are kept while your subscription is active, and afterwards for as long as we need them for tax and accounting obligations.

Paying, and signing in

Checkout, subscriptions, and refunds all happen in Shopify. Your card details go to Shopify and its payment processors — we never see or store a card number.

Signing in to your account pages uses your Shopify customer account, by emailed code or with Google. What reaches us is a token saying who you are. We never receive a password.

If you choose Google, we receive your email address and basic profile information — your name and profile picture — and nothing else. We request no other permissions, and we never ask for access to your Gmail, your Drive, your contacts, or your calendar. We use it to identify your account and to write to you about it: not for advertising, not for profiling, not to train models, and not to pass on to anyone beyond the providers named below. Disconnect it at any time in your Google account.

What we do not collect

No telemetry. The Agent Fleet client contains no telemetry code and reports nothing about how you use it — not which commands you run, not how often, not a byte. It reaches three things over the internet and no others: the licence service, the cloud message server, and the download site it checks for updates. If that ever changes, it will be stated here before it ships.

We do not build advertising profiles, we do not sell anything about you to anyone, and we do not use your messages to train models — we could not, in any case, since we cannot read them.

Mail we send you

We write to you for two reasons: to issue a licence key, and to tell you a new machine has been activated on your subscription. Mail is sent under the name Woodor AI; replies reach us at [email protected].

Who else is involved

• Shopify — catalogue, checkout, subscriptions, and customer accounts.
• Cloudflare — this website, the download site, the cloud relay, files while they are in transit, and outbound email.
• Google — only if you choose to sign in with Google.

What you can ask us to do

Write to [email protected] and we will tell you what we hold about you, correct it, export it, or delete it. To take a machine off your licence you do not need us — run af-ctl activate --remove on it and the slot returns immediately.

Depending on where you live you may have rights under GDPR, the CCPA, or a comparable law. We apply the requests above to everyone rather than asking where you are.

Changes

When this page changes, the date at the top changes with it. If a change means we start collecting something we did not collect before, we will say so plainly rather than quietly widening a sentence.