Privacy Policy

This policy says what Value Machine LLC collects when you use valuemachine.tech, why, who else sees it, and what you can do about it. The short version: we keep what you need to use the service and what you put into it, we share it only with the providers that run the service and the people and tools you authorize, and we do not sell it.

What we collect

• Your account: your email address, your name if you give one, and a hashed password. We never see the password itself.
• What you put in: organizations, projects, records, links, to-dos, descriptions and everything a connected tool writes on your behalf, together with the history of every change (who made it and when). Records are archived, not erased, so history stays complete.
• Connected tools: the name of each agent you connect, the person it acts for, and hashed tokens. Tokens themselves are shown once and never stored in readable form.
• Billing: your plan and its status. Card details go to Stripe and never touch our servers; we keep Stripe's identifiers for your organization's subscription.
• Technical logs: the address, time and path of requests to the service, and errors, kept for a short time to run and secure it.

Cookies and browser storage

We use a session cookie to keep you signed in and a security cookie to protect forms. The browser also keeps small preferences on your own device (which filters are open, how a table is sorted, which graph layout you chose); those never leave your browser. There are no advertising or tracking cookies.

How we use it

To provide the service: to show your organization's work to its members and connected tools, to enforce your plan's limits, to send you the emails the service needs (such as a password reset), and to keep the service running and secure. We do not use your content to train AI models, and we do not sell or rent any of it.

Who else sees it

• People and tools you authorize: members of your organization according to their roles, and the tools they connect, which reach exactly what the person who connected them reaches.
• DigitalOcean hosts the service and its database in the United States (San Francisco region).
• AI providers: when you or a connected tool use an AI feature, the content needed for that work is sent to the provider that performs it (today Anthropic) for that purpose only.
• Stripe processes payments for paid plans.
• The law: we disclose information if a valid legal process requires it, and we will tell you unless we are not allowed to.

Keeping it safe

Connections are encrypted, passwords and tokens are stored only as hashes, each organization's data is kept apart in the database, and access to production is limited to the people who operate the service. No system is perfectly secure; if we learn of a breach affecting your data we will tell you.

How long we keep it

For as long as your organization has an account, because history is part of the product. Logs are kept for a short period. If you ask us to delete your account or an organization, we remove it from the live service promptly and from backups within their retention period.

Your choices

You can see and change your organization's data in the service, export it (a whole project, one click, on plans that include it, or through the API on any plan), revoke any connected tool, and cancel a paid plan from the Billing page. To delete your account or an organization, or to ask what we hold about you, write to [email protected] from the email address on the account.

Children

The service is for adults and businesses; it is not directed at children under 16, and we do not knowingly collect their information.

Changes and contact

We may update this policy; the effective date above tells you when we last did, and we will tell you about changes that matter. Questions: [email protected]. See also the Terms of Use.