Mechane privacy notice

Wallfacer Capital Inc. operates Mechane. This notice describes how the current beta handles information. For privacy questions or requests, email scott@mackie.live.

Information the service handles

Mechane stores account information such as your email address, name, and sign-in profile. Google login shares the profile information needed to identify your account. Email login sends a sign-in code through our email provider. Session and security records can include IP addresses, browser information, and sign-in times.

The service also stores workspace membership, API-key records, agent configuration, prompts, outputs, files, saved context, checkpoints, and run history. Billing records include purchase references, credit balances, metered usage, and payment status. Stripe collects payment and billing details in its hosted checkout; Mechane does not receive your full card number through that checkout.

How information is used and shared

We use this information to authenticate users, run and resume agents, calculate charges, support customers, prevent abuse, and investigate service or payment problems.

Our service providers process information needed for these functions: Cloudflare hosts the application, agent containers, and checkpoints; PlanetScale stores application databases; OpenAI processes prompts and context for the current model; Resend delivers sign-in email; Google supports Google login; Stripe processes payments; and Metronome records credits and metered usage. Provider processing is subject to their applicable terms and privacy practices. Information may be processed outside your country, including in the United States.

An agent can transmit information to external services through the tools and network requests used in its work. Only give an agent information and access you are authorized to share with those destinations. We may also disclose information when legally required or to investigate abuse and protect the service.

Sessions, storage, and requests

Login uses cookies and browser storage to keep your session and complete authentication. The public marketing homepage has no application JavaScript or advertising tracker; hosting providers still process requests needed to serve and protect the site.

Saved agent state persists so agents can resume their work. Closing your browser does not delete that state. The beta does not currently offer a self-service account-deletion workflow or a single automatic retention deadline for all records. Contact us to request access, correction, or deletion. We may need to verify your identity and retain records needed for security, accounting, disputes, or legal obligations. We will explain limitations that apply to your request.

Do not put payment-card details or unrelated sensitive personal information into agent prompts or support messages. This notice will be updated as the service and its data handling change.