Privacy Policy

IDEAgentHub is a desktop app you run on your own Windows machine. We see only what we need to issue and verify your license: your email, your license key, a one-way hash of your hardware, and the IP address of activation requests for rate limiting. We do not record what you type in your IDE, what files you open, or what your AI agents do.

1. Account data

• Email address — captured when you sign up for a trial or purchase through Polar. Used to email you your license key and (rarely) account notices.
• License key — generated by us or by Polar after a successful purchase. Tied to your email.

2. Activation data

• Hardware ID (HWID)— a SHA-256 hash of your Windows MachineGuid combined with your motherboard serial and CPU id. The raw values never leave your machine; we store only the 64-character hex digest. The HWID lets us enforce the “1 device per license” rule.
• IP address — captured per request for rate limiting against credential stuffing and trial abuse. Stored in append-only audit logs and rotated quarterly.
• Activation timestamps — used to detect suspicious patterns (e.g., one license key activating on 12 different machines in 24 hours).

3. Payment data

All payment processing is handled by Polar acting as Merchant of Record. We never see your full card number. We receive only the Polar customer ID, subscription/order ID, plan tier, and event timestamps via webhooks.

• The contents of any file in your workspace, ever.
• What you type to your AI agents or what they type back.
• Telemetry on which IDE you open or how long you use it.
• Crash reports — there is no opt-in or opt-out because IDEAgentHub does not ship a crash reporter.
• Cookies on this website beyond the strictly-necessary session cookie set by /account when you sign in.

• License + account data: Cloudflare D1 (SQLite) in Cloudflare's APAC region (Singapore).
• Installer files: Cloudflare R2 (object storage) — no personal data is in installer artifacts.
• Audit logs: D1, retained 90 days, then purged.
• Your local license cache: stored on your own machine at %LOCALAPPDATA%\IDEAgentHub\license.dat, encrypted under the Windows DPAPI CurrentUser scope plus an AES-GCM envelope keyed by your HWID. We never see this file.

• Polar(payment processor / Merchant of Record). Polar's privacy policy applies to any data you give them directly during checkout.
• Cloudflare (infrastructure). They host D1, R2, and the Workers our API runs on.
• No one else. We do not sell, lease, rent, or trade your data to third parties.

You can email support@ideagenthub.com to:

• Get a copy of all data we hold about you (subject access).
• Have your account and license records deleted.
• Correct any inaccurate data.
• Revoke a device that's using your license. (You can also do this self-service from /account once your account is set up.)

We respond within 30 days. If you're in the EU/UK and not satisfied, you can lodge a complaint with your local data protection authority.

We will update this page when material changes happen and record the new “Last updated” date at the top. For substantial changes, current users will be emailed the diff at least 14 days before it takes effect.

Questions, complaints, or rights requests: support@ideagenthub.com.