Privacy
Last updated October 1, 2026
What we collect
Your account details (name, email, team), billing details handled by our payment processor, and run metadata: which repo, which steps, how long each took and whether the evals passed.
Your code
Code is cloned into a sandbox for the length of one task and deleted when it ends. We never read it outside a run, never sell it, and never use it to train models.
Memory
What runs learn about a repo is stored per repo, readable and editable by your team, and deleted within 30 days of the repo being removed.
Who we share with
Only the processors that run Kestrel: our cloud host, our payment processor and the model providers you route steps to. Each is bound by a data processing agreement.
How long we keep it
Traces for 7 days on Hobby and 90 days on Team. Account data until you delete your account, then 30 days in backups.
Your rights
Ask for a copy of your data, a correction or a deletion at privacy@kestrel.dev. We answer within 30 days.