Privacy Policy

Fabric ("Fabric," "we," "us," or "our") is operated by softwarerror. This policy explains what personal information we collect through the Fabric service, how we use it, and the rights you have — including the specific rights California residents have under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

• Account & workspace information. Name, email address, and password (stored as a salted hash, never in plaintext) when you create an account. Workspace name and subdomain when you create a tenant.
• Agent configuration. The goals, schedules, and tool connections you define for the agents you build in Fabric.
• Secrets and API keys. Third-party API keys (for example, AI provider or integration credentials) that you store in Fabric so your agents can use them. These are encrypted at rest and are only decrypted at the moment an agent run needs them.
• Run data. The output, logs, and error messages produced when your agents execute, including content sent to and received from the AI providers and tools you've configured.
• Technical data. IP address, browser and device information, and log data collected automatically when you use Fabric, including authentication session cookies.

We use the information above to:

• Provide, operate, and maintain the Fabric service, including running your agents on the schedule you configure.
• Authenticate you and secure your account and workspace.
• Communicate with you about your account, changes to this policy, or service issues.
• Diagnose and fix problems, and improve the reliability and performance of Fabric.
• Comply with legal obligations.

We do not sell or share your personal information for cross-context behavioral advertising. We disclose information only as follows:

• AI model providers — when an agent runs, the goal/prompt you've configured (and any tool results relevant to that run) is sent to the AI provider you selected for that agent (for example, Anthropic or OpenAI), using the API key you supplied, so the provider can generate a response. Each provider processes that data under its own privacy policy and terms.
• Tools and integrations you configure — if you connect an agent to an external API or system, the data your tool configuration sends is transmitted to that third-party system as you've directed. You control what those tools send.
• Service providers — infrastructure vendors (hosting, database, and similar operational providers) who process data on our behalf, under contract, solely to help us operate Fabric.
• Legal and safety — if required to comply with a legal obligation, or to protect the rights, property, or safety of Fabric, our users, or others.

We use encryption in transit (TLS) and encrypt stored secrets (such as API keys) at rest. Access to production systems and customer data is restricted to what's needed to operate the service. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We retain account, agent, and run data for as long as your account is active, or as needed to provide the service. You can delete agents, tools, and secrets at any time from within Fabric. If you close your account, we delete or anonymize your personal information within 30 days, except where we're required to retain it for legal or legitimate business purposes.

If you are a California resident, the CCPA/CPRA gives you the following rights with respect to your personal information:

• Right to know what personal information we've collected, used, and disclosed about you.
• Right to delete personal information we've collected from you, subject to certain exceptions.
• Right to correct inaccurate personal information we maintain about you.
• Right to opt out of the sale or sharing of personal information — we do not sell or share personal information, so there is nothing to opt out of today.
• Right to limit use of sensitive personal information — we only use sensitive personal information (such as API keys/secrets) as necessary to provide the service you requested.
• Right to non-discrimination for exercising any of these rights.

To exercise any of these rights, contact us at matthew.fay@softwarerror.com or through your account settings. We may need to verify your identity before completing your request. You may also designate an authorized agent to make a request on your behalf.

If you're located outside California, you may have similar rights under the law that applies to you. Contact us at matthew.fay@softwarerror.com and we'll respond consistent with applicable law.

We use a session cookie that's required to keep you signed in to your workspace. We do not currently use advertising or cross-site tracking cookies.

Fabric is not directed to, and we do not knowingly collect personal information from, anyone under 16 years of age.

We may update this policy from time to time. If we make material changes, we'll notify you by email or through the Fabric dashboard before the change takes effect.

Questions about this policy or your data can be sent to matthew.fay@softwarerror.com.