Privacy Policy
Last updated: 27 September 2026
Descles ("we", "us") operates descles.com. This policy explains what the Descles control plane handles, why, and what rights you have.
1. Your agents' traffic does not pass through us
Descles runs as an edge: a gateway you operate in your own network. Your agents send their model calls and tool calls to your edge, and your edge forwards them to the providers and tool servers you configured. Prompts, messages, tool arguments, tool results and model output go between your edge and those providers; they do not reach us.
If you run your edge standalone, it sends us nothing. If you connect it to the Descles control plane, it pulls signed identities and policy from us and reports a governance and usage record for each call, not its content:
- which organization, edge, agent and person the call belongs to;
- the model name, token counts (input, output, cached), an estimated cost, latency and status;
- the tool name, limited to names your tool servers declared or known categories, and the policy decision;
- timestamps, a trace identifier and, if you set one, a configuration label.
The exact list of fields is published with the edge's source code (DATA-FLOWS.md), where a test keeps the list and the code identical. Arguments of a call waiting for approval stay in your edge's local database and are shown to approvers from there.
2. Provider credentials
With an edge, your provider keys and tool credentials stay on it and are never sent to us.
The earlier hosted service. Since 27 September 2026 our hosted service no longer accepts agent calls or stores provider keys, and we are shutting it down: Descles now runs entirely in your network. Records it made before then (usage and governance fields, and approval records that kept the proposed arguments of held tool calls) and any provider keys stored with it (encrypted at rest with AES-GCM, never returned by an API) are deleted when it is decommissioned. Write to outreach@descles.com before then for an export or an earlier deletion.
3. Your account and workspace
- Identity. Sign-in is handled by Clerk, on GitHub, Google or email. We receive your name, email address, avatar and the account identifier from Clerk. The browser never supplies the email used to provision a workspace.
- Workspace records. Your organization, its person groups, agents, budgets, policy documents, approval decisions and audit records. Agent keys are stored as hashes; the plaintext is shown once when the key is issued.
- Roadmap votes and feedback. If you vote on a planned feature while signed in, we record the vote against your account so one account counts once. Email we receive is kept as ordinary correspondence.
4. Payments
Paid plans are sold by Waffo Pancake, our Merchant of Record, who is the seller on your receipt. Card details and billing details go to Waffo Pancake and never reach us — we receive only the order record: a reference, the product, the amount, the currency and the email address you gave at checkout. Waffo Pancake's privacy policy governs what it does with the payment itself.
5. Cookies and analytics
- Session cookies set by Clerk, so you stay signed in. Without them the console and account actions cannot work.
- Aggregate page analytics via Vercel Analytics, which counts page views without setting cookies and without building a profile of you. We also count coarse setup events, such as whether sign-in loaded, a setup command was copied, or a design-partner application was sent. These event properties do not include your email, company name, provider key, prompts or raw errors.
We run no advertising or cross-site tracking tag on this site.
6. Who else is involved
| Clerk | Identity and sign-in, and your design-partner application if you send one. |
|---|---|
| Vercel | Serving this site and the docs. |
| AWS | Until it is decommissioned, the retired hosted service's records remain in AWS Asia Pacific (Sydney), on encrypted storage. |
| Waffo Pancake | Payments, receipts and any applicable sales tax. |
| Your model provider | Whatever endpoint you route to receives the traffic you route to it. |
We do not sell personal data.
7. Where data is processed
Descles itself runs in your network. Our processors (Clerk, Vercel) operate globally, so your account records may be processed outside your country, including in the United States and the European Union. Where the law requires it, transfers rely on the processor's standard contractual clauses.
8. Keeping and deleting
Usage and governance records are kept while your workspace is active, so budgets, traces and the audit chain stay coherent. Ask us to delete your workspace and we remove your workspace records and traces within 30 days, except records we must keep to satisfy tax, accounting or legal obligations — order records, typically, which are held by Waffo Pancake under its own policy. Message content is not in our records to delete.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete or port your data, to object to or restrict its processing, and to complain to a data-protection authority. Write to outreach@descles.com and we will answer within the period your law allows. Because most of what we hold is about your workspace rather than about you personally, a request usually resolves to an export of that workspace plus a statement of what we hold.
10. Security
Traffic between your edge, the console and our control plane is encrypted in transit. We do not store provider credentials. Agent keys are stored as hashes. The identities and policy your edge pulls are signed, and your edge pins the signing key. Each organization is isolated: one organization cannot see another's members, agents, policy or reported records. Governance events are appended to a signed hash chain, so tampering breaks verification. No system is perfect, and we cannot promise security incidents will never happen.
11. Children
Descles is a tool for people running agents at work. It is not directed at children, and we do not knowingly collect information from anyone under 16.
12. Changes
If this policy changes in substance, the date at the top changes and a material change is announced on the site. See also our terms and refund policy, or write to outreach@descles.com.