Privacy Policy

What we collect

[Company] (“Lithio”, “we”) collects only what it needs to run Lithio:

• Account details. Your name, email address and profile picture from Google or the email you sign in with.
• GitHub access. The repositories you connect and the tokens that let agents work in them.
• Your work. Prompts, messages, files, agent output and the code in your sessions’ sandboxes.
• Secrets. Environment variables you add for your projects. We encrypt them at rest.
• Billing. Your plan and payment history. Stripe handles your card details, and we never see or store them.
• Usage and technical data. Model usage, request logs, IP address, app version and device type, used to run, secure and improve the service.

How we use it

We use your information to run your agents, keep your sessions, bill you, answer support requests, prevent abuse and fix problems.

We don’t sell your information, we don’t show ads, and we don’t use your code or prompts to train AI models.

Who we share it with

We share information only with the services that help us run Lithio, and only what each one needs:

• AI model providers, such as Anthropic and OpenAI, through Vercel’s AI Gateway, to generate agent responses.
• E2B, which runs the sandboxes your agents work in.
• Supabase, Railway and Vercel, which host our database, servers and website.
• Stripe, for payments.
• Resend, to send sign-in codes and account emails.
• GitHub and Google, when you connect or sign in with them.
• Plugins you add, which receive what an agent sends to them.

We may also share information when the law requires it, or to protect our users and service.

How long we keep it

We keep your information while your account is open. Deleting a session deletes its sandbox. When you delete your account, we delete your data within 30 days. Billing records we must keep by law are kept for as long as the law requires.

Your choices

You can ask to see, correct, export or delete your information at any time. Email support@lithio.comand we’ll reply within 30 days.

Depending on where you live, laws such as the GDPR or the CCPA may give you more rights, including the right to object to how we use your information and to complain to your local data protection authority.

Security

Data is encrypted in transit, and secrets are encrypted at rest. Each session runs in its own isolated sandbox. No system is perfectly secure, so if we learn of a breach that affects you, we’ll tell you promptly.

International transfers

Our providers may process information in countries other than yours, including the United States. When they do, we rely on safeguards the law recognizes, such as standard contractual clauses.

Children

Lithio isn’t meant for anyone under 18, and we don’t knowingly collect their information.

Changes to this policy

If we change this policy in a way that matters, we’ll email you before it takes effect.

Contact

Questions about your privacy go to support@lithio.com.