Plain answers about your data.
effective 2026-06-11 · changes will be dated here
ΛXYBOT is built so that an agent cannot act on the world without a person approving the exact content first. The same posture applies to data: store only what the work needs, send it only where the work requires, and be able to say exactly where that is. This page is the whole story, in plain language.
The short version
- This website sets no cookies and runs no analytics or trackers.
- Your content lives in one owner's private workspace, not a shared pool.
- A person approves every message before it is sent. Nothing is sold, ever.
- Content goes to exactly three services to make the product work: Cloudflare, Anthropic, Resend. Nowhere else.
- Questions or requests: hello@axybot.com.
This website
axybot.com is a static page. It sets no cookies, runs no analytics, embeds no third-party scripts, and has no forms. It is served by Cloudflare, which processes standard connection data (such as your IP address) to deliver the page and protect against abuse, the same as for any site behind it.
If an ΛXYBOT wrote to you
Someone you correspond with uses ΛXYBOT. Here is what that means for your data:
- What exists: your email address and the contents of the correspondence, stored in that owner's private workspace, alongside their other working records.
- How it is treated: as data to be triaged for the owner, never as instructions. Content arriving from outside is tagged untrusted by the system itself.
- What was sent to you: a message the owner read and approved, word for word, before it left.
- Who reads your reply: the owner. Their agent may sort and summarize for them, but you are corresponding with the person.
- What never happens: your address is not added to lists, not used for marketing, and not sold or shared with anyone.
If you want your correspondence removed from an owner's workspace, ask them directly or write to hello@axybot.com and we will help.
If you own an ΛXYBOT
Your workspace stores what the work produces: conversations with your agents, the drafts they write, your approvals and rejections, delivered documents, schedules, the facts your agents remember about how you like things done, and an audit record of every action.
Three properties of the architecture matter for privacy:
- One owner per store. Your workspace is yours alone. There is no shared database where your records sit next to anyone else's.
- Append-only by design. Records cannot be silently rewritten or deleted at the database layer. This is a security property: what you approved is what was sent, provably. It also means the system keeps an honest history rather than an editable one.
- Agents hold no credentials. Your passwords, accounts, and channels live with a separate executor program. Sign-in to your own workspace uses passkeys; the biometric never leaves your device.
The services we rely on
Content leaves the workspace for exactly three reasons, each a named service with its own contractual obligations:
- Anthropic provides the model that powers agent reasoning. Conversation content, documents an agent reads, and screenshots from web tasks are sent to Anthropic's API to generate responses, under commercial API terms that do not allow this content to be used for model training.
- Cloudflare hosts this site and routes email to and from axybot.com addresses. Inbound mail passes through Cloudflare's email infrastructure on its way into the owner's workspace.
- Resend delivers outbound email after the owner approves it.
That is the complete list. When an agent does web tasks, it can only reach sites on its owner's allow-list, enforced at the network layer.
What we never do
- No selling or renting data, to anyone, in any form.
- No advertising and no sharing with ad networks or data brokers.
- No training of models on your content, ours or anyone else's.
- No third-party analytics or trackers, on this site or in the product.
- No sending anything anywhere a person did not approve.
Retention and deletion
A workspace keeps its records for as long as its owner keeps the workspace; the append-only history is part of what makes approvals trustworthy. An owner can retire individual agents, and closing a workspace deletes its store. Recipients can request removal of their correspondence as described above. We will honor reasonable requests and tell you plainly if something cannot be removed and why.
Changes
If this page changes, the date at the top changes with it. ΛXYBOT is invite-only and small; if a change is significant, owners will hear about it directly, not discover it here.
Contact
Write to hello@axybot.com. A person reads it.