Use Agent Now
Privacy design

Your prompts never hit our disk.

Privacy by architecture, not policy. The whole design is on this page — three promises, the data flow, the persistence list, third parties, where the bits actually live, how to verify.

SOC 2 Type II in progress · first report by end of 2026security@useagent.now · 48h response
Three promises

The three sharpest questions, answered the same way everywhere.

These same sentences appear in the landing FAQ, the CLI help text, and the support playbook. One wording, no remix.

01
We do not persist your request or response content.
Prompts, code, and chat history live in memory only.
02
We do not train on your content, and we do not sell it.
No data brokers. No distillation partners. No analytics middlemen.
03
The boundaries are architectural, not policy.
No code path on our servers reads or stores content. Verified by SOC 2 Type II (in progress, report by end of 2026).
Request lifecycle

Where your bytes go. And don't.

One extra hop between your terminal and Anthropic. Inside that hop, request and response bodies are in memory only — never written to disk, a log aggregator, or an analytics pipeline.

01 / Your terminal
Claude Code CLI
OAuth and API keys live in your OS keychain. UAN never reads them from your disk.
02 / UAN edge + core
In-memory only
Authenticates the key, forwards the stream. Reads token counts off the bytes in flight. Body is never buffered for logs or review.
writes nothing to disk
03 / Anthropic
api.anthropic.com
Your request body reaches Anthropic as you wrote it. UAN does not pass your identity, email, IP, or GitHub username upstream.
The only thing UAN persists
Metadata store — counters, not content
Written at stream completion. No request body, no completion text, no field tying a row back to the bytes.
  • tstimestamp
  • modelmodel id
  • in_tokenstoken count in
  • out_tokenstoken count out
  • errorupstream error code

Request and response bodies are never written to disk, log aggregator, or analytics pipeline anywhere in this path. What UAN persists is listed in full below — counters that support billing, reconciliation, and upstream debugging. Nothing more.

Data inventory

Exactly what's persisted. Nothing more.

Every row shows what we store, why we need it, how long it stays, and how it leaves. The 13-month baseline covers a full billing year plus one month of reconciliation slack. Legal-retention rows sit longer because tax and anti-money-laundering rules require it.

WhatWhyHow longHow to delete
Your account (GitHub ID, email)Account systemUntil you delete accountDashboard → Settings → Danger zone
Key metadataKey management13 months after revokeAutomatic
Request metadata (token count, timestamp, error code)Billing, reconciliation13 monthsAutomatic
Wallet ledger entriesTax + reconciliation24 months (legal minimum)Automatic archive
BYO OAuth tokensRequired to proxy your requestsUntil you revokeImmediate on revoke
Payment metadataRefunds, tax7 years (legal minimum)Automatic
Delete your account at Dashboard → Settings → Danger zone. Keys, BYO tokens, and chat bindings are destroyed immediately. Request metadata, wallet ledger, and health statistics enter a 14-day grace window — recoverable during the grace, purged after. Rows held for legal minimums leave on schedule.
Never stored

What you won't find in our database.

Not stored because no code path on UAN's servers reaches for it in the first place. The architectural cost of adding any of these rows is a schema change, a privacy-doc rewrite, and a 30-day advance-notice email — by design.

  • Your prompts or code
  • Claude's responses
  • Your conversation history on our side
  • Your IP addressseen at the TLS terminator for routing, never retained
  • Email open / click tracking
  • Third-party analytics of any kind
Three boundaries

Three places content is touched. Scoped, logged, and bounded.

“We do not persist request or response content” is honest. It is also narrow. Three paths do touch content for a specific reason — each with explicit limits. All three are here.

How it matches
Strict string prefix, total length under 80 characters, second word in a closed list: recharge, status, balance, keys, help. No regex, no semantic parsing, no LLM call.
If it hits
The message is intercepted and handled by UAN. It is not forwarded to Anthropic.
If it misses
The message is forwarded to Anthropic unchanged. UAN does not read it further.
What we log
A counter event — key X matched `recharge` at time T. The original text is never written.
How the list changes
Adding a command requires a PR against the whitelist. It cannot be extended silently to cover sensitive verbs like byo, earnings, or uninstall.

Third parties

Everyone who sees anything. Everyone who doesn't.

UAN shares the minimum data each party needs. Each row spells out what they get, what they do not, and which contract governs it.

Third partyWhat we giveWhat we don'tLegal doc
AnthropicRequest body + response body, forwarded untouched. UAN's own billing account.Your identity, email, IP, GitHub username.Anthropic Terms + UAN zero-retention API clause
StripeYour email, recharge amount, card metadata (received by Stripe directly).Request content, key list, BYO credentials.Stripe DPA
Alipay / USDT on-chainRecharge amount, on-chain address or Alipay ID.Any other user data.Channel ToS
AWSInfrastructure-layer storage for the rows listed above.Nothing outside the persistence list.AWS DPA
KYC vendor (providers only)Provider identity documents for payout compliance.Anything from regular users.Vendor DPA
Your OS keychainLocal OAuth and key storage on your own machine.UAN server does not read it.System API
Explicit denials
Categories UAN does not — and will not — share with.
  • No behavioural analytics

    UAN does not use Google Analytics, Segment, Mixpanel, Amplitude, or any other third-party behavioural analytics tool.

  • No model distillation partners

    UAN does not share user content with DeepSeek, Kimi, or any downstream model company.

  • No secondary data market

    UAN does not sell, trade, or exchange data with any data broker.

Email is sent from UAN-operated SMTP (AWS SES as a pure delivery backend). No open-tracking pixels, no click tracking, no marketing automation vendor.
Where the data lives

We don't promise “data never leaves region X.” We tell you exactly where it lives.

Most UAN users are cross-border developers who want low-latency access and a guarantee their code is not read. A hard geo-gate doesn't help them and would become a product tax on every future change. Instead, the exact residency map:

Data classPrimary regionReplicasNote
Account, keys, wallet ledgerAWS us-east-1 (Virginia)Read replicas in Tokyo and SingaporeWrites go to the primary. Asia-Pacific replicas exist for read latency.
Request metadata (for billing)AWS us-east-1NoneSingle-region to keep billing counters consistent.
BYO credentialsDedicated KMS in us-east-1 under its own IAM boundaryNoneNo cross-region replication — intentionally smaller blast radius.
Edge nodesEast Asia, Europe, North AmericaForward only. No persistence at the edge.
Audit logsAWS us-east-1Cold backup in us-west-2Required for compliance continuity.
How to verify

Two anchors. No more, no less.

This page is the technical authority on UAN's privacy design. Everything on it is under independent audit. Security disclosures go straight to the engineering team.

Anchor 01 / this document

The full design is on this page.

UAN's privacy commitments are defined in this document. Any product decision that conflicts with it defers to it. Changes are versioned in a public repository; material changes trigger a 30-day advance notice email and a banner at the top of the page.

  • Changes are tracked in the changelog at /changelog.
  • Three commitments cannot be weakened: no content persistence, immediate credential destruction on revoke, no onward sale.
Anchor 02 / SOC 2 Type II

Independent audit, continuous observation.

Scope covers the Security, Confidentiality, and Privacy Trust Service Criteria. Observation window exceeds six months. The audit partner and kick-off date are published on this page the day the engagement begins; the first report will be available in executive-summary form publicly and in full under NDA.

  • Readiness assessmentType I readiness completedone
  • Observation windowType II observation in progressactive
  • First Type II reportPublished by end of 2026next
Security disclosure
Found a gap? Email us.

48-hour acknowledgement SLA. High-severity findings get a 7-day disclosure plus a public fix timeline. No bounty — maintained acknowledgement page instead.

Contact

Who to email, for what.

Canonical statement

This page is the canonical statement of UAN's privacy design.

Anything that conflicts — marketing copy, sales pitches, support answers — defers to this page.