Sign in

Privacy Policy

Last updated October 6, 2026

This policy explains how Straylight Technology ("we") collects, uses, stores and shares information when you use Straylight at agent.straylight.tech.

Information we collect

  • Sign-in information. When you sign in with Google we request only the openid, email and profile scopes and receive your name, email address, whether that email is verified, and your profile picture URL. GitHub and Microsoft sign-in provide the equivalent basic profile. We do not request access to your Gmail, Drive, Calendar, contacts or any other Google data.
  • Content you create. Chat messages, uploaded files, agent and workflow settings, and other content you enter.
  • Technical data. Session cookies needed to keep you signed in, and server logs (IP address, browser user agent, timestamps) used for security and debugging.

How we use it

  • To create and identify your account and keep you signed in.
  • To provide the assistant: your name and email address are included in the assistant's instructions so it can address you, and your messages are sent to AI model providers to generate replies.
  • To secure the service, prevent abuse and fix problems.

We do not sell your information, use it for advertising, or use Google user data to train AI models.

Google user data

Straylight's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google profile information is used only to sign you in and to personalise the assistant as described above.

Where it is stored and who processes it

Data is stored in a PostgreSQL database hosted by Neon and in Vercel Blob storage, and the app runs on Vercel. Assistant requests are routed through Vercel AI Gateway to the AI model providers that generate replies; they process the content of those requests under their API terms. We share information with these service providers only to run Straylight, or when required by law.

Retention and deletion

We keep your account and content while your account is active. You can delete individual chats in the app, and you can ask us to delete your account and associated data at any time by emailing privacy@straylight.tech. You can also revoke Straylight's access from your Google Account at myaccount.google.com/permissions.

Security

Data is encrypted in transit (HTTPS) and at rest by our hosting providers, and access is limited to authorised operators.

Changes and contact

We will update this page if our practices change. Questions or requests: privacy@straylight.tech.