Privacy Notice

This notice applies when we act as the controller of personal data—for example, when you visit our website, create an account, download or use Radius, contact us, or purchase a paid service. It does not cover employment-related data or information that applicable law does not treat as personal data.

In some circumstances we process information on behalf of a customer or at a user's direction. In those cases, the relevant customer may be the controller and its privacy notice may also apply.

Radius is designed so that projects, source code, worktrees, browser state, terminal sessions, and chat history are stored locally on your device by default. We do not routinely upload or maintain a hosted copy of those materials merely because you use the browser.

When you invoke an AI agent, integration, cloud-backed feature, or website service, the content needed to perform your request may be transmitted to the provider you select or to a service acting on our behalf. Depending on the feature, this can include prompts, page context, file excerpts, tool results, or a limited portion of a message used to generate a chat title. The provider's own terms and privacy notice also govern its processing.

Depending on how you interact with us, we may collect:

• Account and contact information, including name, email address, account identifiers, organization and role information, authentication status, and communication preferences.
• Transaction and subscription information, such as plan, entitlement, billing status, purchase history, and limited payment metadata. Payment card details are provided directly to Stripe; we do not receive or store full card numbers.
• Support and communications, including messages, feedback, attachments, and other information you choose to provide when contacting us.
• Website and download data, including pages viewed, interactions, referring page, browser and device information, approximate location derived from IP address, download architecture, and timestamps.
• Product, diagnostic, and usage data, including application version, operating system, install or account identifier, feature interactions, performance measurements, crash logs, error details, and limited agent-run telemetry used to operate, secure, and improve the service.

Our website uses cookies, local storage, pixels, SDKs, and logging technologies for authentication, preferences, security, analytics, and performance. We currently use PostHog for product and website analytics, including autocaptured interactions and page views, and Vercel Analytics and Speed Insights for website performance information. Session replay is not enabled by default and may run only when specifically activated for troubleshooting or testing.

You can limit cookies and local storage through your browser settings, but doing so may prevent authentication, preferences, or other features from working correctly. We do not use personal data for third-party targeted advertising and do not sell personal data for money.

We use personal data to:

• provide, maintain, personalize, and troubleshoot our products and services;
• authenticate users, administer accounts, subscriptions, and downloads;
• process transactions and provide billing and customer support;
• measure performance, understand feature usage, and improve reliability;
• detect fraud, abuse, security incidents, and violations of our terms;
• communicate service, security, legal, and product updates;
• comply with law and establish, exercise, or defend legal claims; and
• carry out another purpose disclosed when information is collected or with your consent.

We may disclose personal data:

• to service providers that support hosting, authentication, payments, entitlements, analytics, diagnostics, customer support, communications, and infrastructure, including WorkOS, Stripe, Autumn, PostHog, Vercel, Sentry, and Context Company;
• to AI model and integration providers when you choose to use their services, including providers such as Anthropic, OpenAI, Cerebras, or another provider you configure;
• at your direction, with your consent, or to complete a requested integration;
• in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of our business; and
• when reasonably necessary to comply with law, legal process, or lawful government requests; enforce agreements; prevent harm; or protect rights, property, safety, and security.

We retain personal data for as long as reasonably necessary to provide the services, maintain business and legal records, resolve disputes, enforce agreements, and satisfy legal, accounting, tax, security, and compliance obligations. Retention periods vary by the type of information and the reason we process it. Local product data remains under your control and is generally retained until you delete it or remove the application data.

We use administrative, technical, and organizational safeguards designed to protect personal data. No security measure or transmission method is completely secure, and we cannot guarantee absolute security.

We and our service providers may process personal data in the United States and other countries whose data protection laws may differ from those where you live. Where required, we use recognized transfer mechanisms and other safeguards for international transfers.

You may update certain account information in the product, unsubscribe from promotional emails through the link in those messages, and control website storage through your browser. Service-related messages may continue when necessary to provide an account or service.

Depending on where you live, you may have rights to request access, correction, deletion, portability, or restriction of personal data; object to certain processing; withdraw consent; or appeal a denied request. You may also have the right to complain to a data protection authority. We may need to verify your identity before completing a request, and applicable law may permit or require us to retain certain information.

To submit a request, email founders@sandboxtechnologies.dev. Authorized agents may submit requests where permitted by law, subject to verification of their authority and your identity.

Our services are not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided personal data to us, contact us so we can take appropriate action.

Our services may link to or interoperate with third-party websites, applications, model providers, extensions, and integrations. Their privacy practices are governed by their own notices, not this Privacy Notice. Review those notices before providing personal data to a third party.

We may update this Privacy Notice from time to time. We will revise the effective date above when changes are published. If changes are material, we may provide additional notice through the website, product, or the email address associated with your account.

Questions or requests about this Privacy Notice may be sent to founders@sandboxtechnologies.dev.

Sandbox Technologies INC.
United States