Draft
Privacy
Fractal is a hosted engine with a free client on your machine. This page says exactly what reaches our servers, how long it stays, and what never does.
What our servers see
- Your source, for one job. Only the files your client sends for a job, named by their content hash; each at most 1 MB, at most 50 MB for a job. They are kept for that job only, 24 hours at most, and deleted when the job ends. You can end a job at any time, and its files go at once. They are never logged and never used for anything else: not for training, not for analytics, not shared.
- What the engine works out from them, for the same job and the same time: the board, the plan, the change and its report. These go when the job's files go.
- What your client sends back while the job runs, for the same job and the same time: the model answers your agent gave the engine (their text, which can hold code the model wrote, and the token counts), and what your type checks and tests print (their exit code, output and errors). These go when the job's files go.
- Your IP address, to limit how often one address may call us: counted for one minute, and for one hour where it sends sign-in emails. Never logged.
- Your account: your email address or GitHub login, your team, its seats, the computers you connected (their names, the client's version, when they were last seen), and your plan.
What never reaches our servers
- Any model key. Every model call the engine needs is sent back to your client, which asks your own Claude Code, on your Claude subscription. We never hold a model key and never pay for or see your model account.
- The running of your code. Type checks and tests run on your machine, in a copy of your repo. Fractal never runs your code on its servers.
- Your repo's other files. Your client sends only what a job needs.
Who else is involved
- Stripe takes payments and holds your card. We keep your Stripe customer and subscription ids.
- Resend sends the sign-in and invite emails, so it sees the address it sends to.
- GitHub, if you sign in with it: we keep your GitHub id and login.
- Cloudflare runs our servers and the engine's container.
How long we keep things
- A job's files and results: until the job ends, 24 hours at most.
- Your account: until you delete it. A deleted account is archived for 90 days (so a refund or a dispute can be settled), then deleted with its Stripe customer.
- Sign-in links and connect codes: minutes. Email send counts, by address and by IP address: one hour. Request counts by IP address: one minute.
Your choices
Download your data or delete your account from your account page.