How Pecus handles your data

• Account: your email and name, through our sign-in provider.
• Your workspace content: records, saved memory, tasks you delegate, their steps and approvals, and your settings.
• Connected tools: the access tokens or sign-ins you grant, encrypted on our servers. They are never sent to the AI model or shown in Slack.
• What Pecus reads for you: bounded excerpts of tool results used in a task, with their source and time, so answers can show their sources.
• Slack: Slack team and user identifiers, the messages that mention Pecus or are sent to it directly, and delivery records. Reply content is cleared from delivery records once sent.
• Usage and operations: AI token counts per task, worker health counts, and rate-limit counters. Rate-limit counters store only a hash, never your email or IP address.

Only to provide the service: answering your questions, running the tasks you delegate within the permissions you grant, showing their sources, and keeping the service reliable and within limits. We do not sell your data or use it for advertising.

• Vercel hosts the application.
• Supabase provides the database and sign-in.
• OpenAI processes the request text and relevant context to generate answers. Requests are sent with storage turned off.
• Slack and the tools you connect receive only the requests Pecus makes on your behalf, with your authorization.

Your connections, memory and tasks are private to your account. If a workspace owner or admin shares a tool with the workspace, members can read through it with that admin’s access, limited to the tools and people the admin chose. In shared Slack channels, answers built from someone’s private data are sent to that person directly.

Finished task history: 180 days. Notifications: 180 days. Slack delivery records: 30 days. Usage counts: 400 days. Expired sign-in states and links are removed automatically. Active work is never removed by these schedules.

Disconnect any tool or revoke its access with the provider at any time. Export your records from Settings → Data & privacy, and permanently delete your data there. If you own a workspace with other members, remove them first.

Traffic is encrypted in transit, credentials are encrypted at rest, database row policies separate each account’s data, and anything that can change data in your tools waits for your approval.

A contact address for privacy and legal questions has not been published yet; ask your workspace administrator in the meantime.