Privacy & data handling

Where your data lives

• Client workspace — durable context your agent decides to keep, in a private GitHub repository owned by the DoTillDone organization. Not public, never indexed.
• Operational data — email delivery records, run logs, schedules and usage accounting, in an access-controlled database.
• Backups — encrypted (age) backups of operational data and workspace archives, stored in private object storage.

What the model sees

Agent runs send your instructions, workspace context and the current event to the configured model via OpenRouter. Model providers are selected through OpenRouter's model configuration.

Deletion reality (stated honestly)

Client workspaces are git repositories: deleting a file removes it from the current state but not from history. Permanent deletion requires history rewriting and backup rotation, which DTD does not offer as a simple button. We say so plainly rather than implying otherwise. Contact hello@dotilldone.com for deletion requests.

Untrusted content

Attachments, forwarded messages, quoted threads and linked documents are treated as data, never as instructions to the agent. Only authorized client users can change your agent's standing instructions.