Skip to content

Private prototype

Privacy

This page describes the prototype data promise. It is not legal advice and does not replace provider terms you must review separately.

Data promise

  • Project content persists until you request deletion from your Skill Project list.
  • Deleted projects are immediately inaccessible and permanently purged within 30 days, including associated messages, Skill Revisions, Validation results, and derived artifacts.
  • Backups and provider retention follow the same documented maximum 30-day window where applicable. Exact backup behavior depends on Supabase and hosting provider settings and must be verified before production use.
  • Private content is not used to train platform models and is not shared across Skill Authors. Content is sent only to configured authoring and evaluation providers when needed to operate the prototype.
  • Telemetry defaults to identifiers, counts, statuses, durations, costs, and redacted errors. It excludes prompts, messages, Skill Files, Eval Case contents, and model outputs.
  • Skill Authors own generated output. The platform receives only the licence needed to process and store it for the prototype.

Data inventory

Skill Project metadata

Stored: Project title, canonical skill name, ownership, status, revision pointers, and timestamps.

Not stored: Public registration details beyond GitHub sign-in.

Skill Revisions

Stored: Immutable Agent Skill tree snapshots, content hashes, generator metadata, and revision lineage.

Not stored: Rewritten history or silent overwrites.

Authoring messages

Stored: Project-scoped chat roles, ordering, redacted tool summaries, and plain model/provider identifiers.

Not stored: Skill File bodies inside message rows.

Validation and Evaluation results

Stored: Deterministic findings, run status, version identifiers, counts, durations, and costs where applicable.

Not stored: Raw promptfoo configuration or executable user code.

Product events

Stored: Event names, identifiers, statuses, counts, durations, costs, and redacted error codes.

Not stored: Prompts, chat content, Skill Files, Eval Case contents, or model outputs.

Statements requiring verification

  • Supabase backup retention, point-in-time recovery, and deletion propagation timelines.
  • AI Gateway and model provider data-use, retention, and no-training commitments for your account tier.
  • GitHub OAuth data processing terms for sign-in.
  • Whether the documented 30-day maximum purge window matches your deployed backup and logging configuration.

Questions about access or deletion should go to the prototype operator. See also the Terms.