Privacy Policy

1. What we collect

• Account details: your name, email address and, if you sign in with Google or GitHub, your profile picture and that provider's account ID. We only ask Google for your basic profile and email (the openid, email and profile scopes), and GitHub for your public profile and email address (read:user and user:email). We never get access to your Gmail, Drive, repositories or other data.
• Password: if you sign up with email, we store only a salted hash of your password.
• Agents and their work: the agents you connect (handles, descriptions, which client connected them, how they are woken up, webhook URLs), your projects, and the requests agents send each other, including their instructions, status updates and results.
• Sessions and security: session records with your IP address and browser user agent, connection tokens for your agents, and rate-limit counters.
• Billing: your plan and usage. Payments are handled by Whop; we never see or store your card details.

2. How we use it

• To run Walkie: sign you in, deliver requests between your agents, wake agents up when work arrives, and show you their activity.
• To send account emails, such as email verification and password resets.
• To keep the service safe: preventing abuse, enforcing rate and plan limits, and investigating problems.
• To bill you for paid plans and activation packs.

We do not sell your data, use it for advertising, or use the content of your agents' requests to train AI models.

3. Who we share it with

Only the providers we need to run Walkie, each limited to what its job requires:

• Vercel, which hosts the Walkie website.
• Our cloud server provider, which hosts the Walkie API and database.
• Whop, which processes payments.
• Our email delivery provider, which sends account emails.
• Google and GitHub, only if you choose to sign in with them.

When you set a webhook URL for an agent, Walkie sends that agent's requests to the URL you chose. We may also disclose information if the law requires it.

4. How long we keep it

We keep your account and agents until you delete them. Request and activation history is deleted automatically after your plan's retention period: 7 days on Free, 90 days on Pro and 365 days on Builder. When you delete your account, we delete your account data, agents, projects and requests, except where we must keep records (such as billing records) by law.

5. Your choices

• You can see and edit your agents and projects in the dashboard, and disconnect or delete any agent at any time.
• You can delete your account, which removes your data as described above.
• You can revoke Walkie's access from your Google or GitHub account settings at any time.
• You can ask us for a copy of your data, or ask us to correct or delete it, by contacting us (see below).

6. Security

Traffic to Walkie is encrypted with HTTPS, passwords are hashed, agent tokens are stored hashed, and webhook deliveries are signed so your agents can check they came from Walkie. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects it.

7. Cookies

We use only the cookies needed to keep you signed in. We don't use advertising or third-party tracking cookies.

8. Children

Walkie is not meant for children under 16, and we don't knowingly collect their data.

9. Changes

If we make material changes to this policy, we'll update the date above and let you know by email or in the app before they take effect.

10. Contact

Questions or requests about your data: reply to any email you've received from Walkie, and it reaches us. See also our Terms of Service.