Privacy Policy

Last updated: February 11, 2026

This Machine ("we," "our," or "us") operates the This Machine platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Information We Collect

Account Information

When you create an account, we collect information provided through your authentication method, which may include:

  • Your name
  • Email address
  • Profile picture (if provided by your authentication provider)

API Keys

Our Service operates on a "bring your own key" (BYOK) model. When you provide your Anthropic API key, it is encrypted and stored securely. We use your API key solely to make requests to Anthropic's services on your behalf.

Usage Data

We automatically collect certain information when you use the Service, including:

  • Sandbox compute time usage
  • Feature usage patterns
  • Error logs and performance data
  • Browser type and device information

Content You Create

We store the content you create within the Service, including machines, threads, messages, and files stored in your sandboxes. This content is necessary to provide the Service and enable collaboration features.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process your transactions and manage your subscription
  • Enable real-time collaboration features
  • Send you service-related communications
  • Respond to your requests and support inquiries
  • Monitor and analyze usage patterns to improve user experience
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations

Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

We work with third-party service providers to operate our Service:

  • Convex: Our backend database provider that stores your account data, messages, and application state
  • Daytona: Provides the sandbox infrastructure where your code executes
  • Anthropic: Provides the Claude AI services. Your prompts and conversations are sent to Anthropic using your API key
  • Polar: Handles subscription billing and payment processing
  • Composio: Enables third-party app integrations and connected account functionality
  • here.now: Hosts static sites you deploy from your machines

Collaborators

When you invite others to your machines, they can view and interact with the content within those machines according to their permission level.

Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Data Security

We implement appropriate technical and organizational measures to protect your information:

  • API keys are encrypted at rest
  • All data transmission uses TLS encryption
  • Access to production systems is restricted and logged
  • We regularly review and update our security practices

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specifically:

  • Account information is retained until you delete your account
  • Content in machines and threads is retained until you delete it or your account
  • Sandbox files may be archived after periods of inactivity per our infrastructure policies
  • Usage logs are retained for up to 90 days

Upon account deletion, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate information
  • Delete your personal information
  • Export your data in a portable format
  • Object to or restrict certain processing
  • Withdraw consent where processing is based on consent

To exercise these rights, please contact us at support@thismachine.ai.

Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. Our service providers may store data in various locations globally. By using the Service, you consent to the transfer of your information to these locations.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at support@thismachine.ai.