Last updated: July 22, 2026
Operator (“we”, “us”) makes a control plane for supervising AI coding agents across your Mac, iPhone, and Apple Watch. This policy explains what we collect, how we use it, and the data we deliberately never see.
The short version
- Your code, your agents’ commands, and the contents of your sessions stay on your Mac. We do not collect them.
- Our relay is zero-knowledge: it forwards sealed, end-to-end payloads it cannot read, only routing metadata.
- Your audit log and policies live on your device, not on our servers.
- Payments are handled by Stripe; we never store your card details.
What we collect
Account
When you sign up, we store your email address and an opaque beta key. That’s the account.
Billing
If you start a subscription, our payment processor (Stripe) collects and processes your payment information. We store a Stripe customer identifier and your subscription status (e.g. trialing, active, canceled) so we know what to unlock. We do not receive or store your full card number.
Device pairing & notifications
To connect your phone and watch to your Mac, we handle cryptographic device identifiers and, if you enable notifications, an Apple Push Notification token so we can wake your device for an approval. These identify devices, not you personally.
Onboarding survey (optional)
During onboarding you may tell us which agents you use and how you work. This is optional, stays on your device, and, only if you choose to share it, helps us improve the product. You can skip it.
Diagnostics
Our website and relay may process basic technical data (such as IP address and request metadata) to operate and secure the service.
What we do not collect
We do not collect your source code, the commands your agents run, the contents of approvals, your BYOK model API keys (those stay in your device Keychain), or your audit history. The relay cannot decrypt what it forwards.
How we use data
- To provide the service: pairing, routing approvals, and notifications.
- To bill and manage your subscription.
- To keep the service secure and reliable.
- To improve the product, using aggregate or optional survey data.
Who we share data with
We use a small set of processors to run the service: Stripe (payments), Cloudflare (relay and website hosting), and Apple (push notifications). We do not sell your personal data.
Storage, security & retention
Secrets on your devices are stored in the system Keychain. The relay stores queued messages only briefly (short time-to-live) and only as sealed payloads. Account and billing records are kept while your account is active. You can ask us to delete your account and associated data at any time.
Your rights
Depending on where you live (including under GDPR and CCPA/CPRA), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise any of these, or to delete your account, email us at [email protected].
Children
Operator is a professional developer tool and is not directed to children under 16.
Changes
We may update this policy; we’ll revise the “last updated” date above and, for material changes, notify you.
Contact
Questions about privacy? Email [email protected].