legal

Privacy

Pipemason is built so your code stays on your machine. The runner executes locally; we receive only the metadata and audit events you stream to us (run id, branch name, phase transitions, test counts, agent names, timestamps). Source code, secrets, and environment variables stay on your hardware.

BYO Anthropic key means we never see your tokens. Your AI bill is between you and Anthropic. We charge for the orchestration layer, not for the AI you consume.

Optional artifacts (screenshots, log archives) upload to R2 only when you opt in via config.yml.

Full privacy policy and DPA template land before public launch.

Questions? privacy@pipemason.com.