Privacy
What cemainou keeps when you have an account, why, for how long and who sees it. In short: only what the team needs to know what is being worked on, without the content of your conversations with the agent and without your code.
cemainou at d.rt.md
Who is responsible for the data
cemainou-demo-en. The app runs on our server; the data is not sold and not used for ads.
For any question or request about your data: hello@example.com.
Who can have an account
Nobody signs up on their own: you get an account only by invitation, from an admin. The team sees the team's projects; someone from a client sees only their company's projects that are turned on as visible to the client, and only what is shown to them there.
What we keep
- Your account: name, email, password (only as an irreversible hash), time zone, language and notification preferences; optionally two-step sign-in.
- What you write: the updates, tasks, comments, notes, documents and files you add, with their date and author.
- Work time, from the agent: if you connect your agent (Claude Code, Cursor...), it sends only when you work and on which project: the time and the kind of signal (session started, message, tool, stop). It does not send the text of your conversations, your code or your files. The hours per day are computed from these signals.
- What the agent reports: at /upd the agent shows you the draft and sends it only after you confirm it; only what you see in the draft is sent (the lines, the number of commits and lines of code, the messages of commits that mention a task).
- The log of agent calls: which tool was used and when, for security and limits.
- Notifications: if you turn them on, the device address given by the browser (for phone or computer notifications) and, if you link your account, your Telegram identifier.
- The site widget (on projects that have it): a report keeps the page, browser, screen, the element shown and the page's errors; visitors without an account leave their name and email only if they want to.
For how long
- Raw signals from the agent and the log of calls: 90 days; after that only the totals per day remain.
- Notifications in the bell: 90 days.
- Agent keys unused for 90 days are revoked on their own.
- What was written on projects stays with the project, so its history stays whole. Your account stays as long as you work with us; when you leave it is turned off, and your personal data (email, preferences, devices, Telegram) is deleted or anonymized.
Who sees the data
Colleagues see what you write on the projects they see too; your hours are seen by the team (not by the client); an outside collaborator sees only their own. The client sees only non-internal updates and what is shown to them on their projects, without hours. Nothing goes to others, except the services below, only to do their job:
- your browser's notification service (Google, Apple or Mozilla), only for the notifications you turned on;
Your agent (Claude, Cursor...) runs on your side, with your account: what you tell it stays between you and its provider.
Cookies
Only the strictly necessary ones: the session (keeps you signed in; it expires after 120 minutes without activity), form protection and, if you tick "Remember me", the one that keeps you signed in. No analytics, no ads, no third-party tracking, which is why we do not ask for cookie consent.
Your rights
The updates, tasks, comments and files on projects are work done for the company and its clients: they belong to the company and, where relevant, to the project's client, not to the account that wrote them. For your personal data (name, email, your hours, devices) you can ask at any time to see what we keep and to correct what is wrong. You change most of it yourself, from your profile (name, notifications, Telegram, connected agents). For the rest, write to hello@example.com; we answer within 30 days. If you are not satisfied, you can turn to the data protection authority of your country.
How it is used
- The account is yours: do not share it, and keep your password and agent keys to yourself.
- Do not put passwords, keys, card details or other people's personal data in cemainou; the agent is instructed to leave them out.
- What you write on a project belongs to the company and, where relevant, to the project's client.
- An admin can turn off an account, for example when someone leaves the team.