RigSpark
Privacy Policy
RigSpark runs AI on your own computers. Your models, prompts, files and the crew's outputs stay on your Macs and never reach us. This policy explains the small amount we do collect to run your account, billing and the website.
What never leaves your Mac
Prompts, chats, task descriptions, file names and contents, code, generated images, video and audio, and the tokens for services you connect (such as GitHub or Slack). RigSpark Crew's reports to us are checked on our side and anything else is refused.
What we collect, and why
- Your account. When you sign in with Apple or Google we receive your name, email and account id from them (with Sign in with Apple you can hide your email). We keep you signed in with a secure session cookie. In our database you're stored under a one-way, keyed hash of your account id, not your name or email. Why: to provide your account (contract).
- Activity. The days you were active on the website and in the Mac app, when you first signed in, and onboarding steps you've completed. Why: to run and improve the Service and count active users (legitimate interests).
- Your Macs. For each Mac running RigSpark Crew: a random install id, the Mac's model, chip, installed memory and disk size, macOS and app versions, and whether you've chosen to use it with your plan. Why: to check which specialists your Macs can run and apply your plan (contract).
- Task statistics. For each task: which crew member ran it, light or heavy, its status and times, whether it asked you something, whether the lid was closed, and estimated minutes saved. Never the task's content. Why: reliability and product improvement (legitimate interests).
- Connected services. The names of the integrations connected on each Mac (for example "github"), not their tokens or data. Connecting GitHub passes through rigspark.si: the tokens are encrypted to your Mac's key before they leave our server and are not stored. Why: to show your connections (contract).
- App health. Daily counts of events such as a task stopping because the Mac was too hot. Why: reliability (legitimate interests).
- Website visits. Which page was viewed and where the visit came from, under a visitor id that changes every day. We don't store IP addresses or browser strings. A first-party cookie remembers where you first came from for 30 days so it can be linked to your account when you sign in. We don't count visits from browsers that send Do Not Track or Global Privacy Control. Why: to understand how people find RigSpark (legitimate interests).
- Billing. If you buy a plan, Stripe collects your name, email, billing address, tax id (if you give one) and payment details. We keep your Stripe customer and subscription ids, plan, status, number of seats and renewal date. We never see your full card number. Why: to take payment and meet tax and accounting law (contract, legal obligation).
- "Mac went silent" alerts (optional). A random id per Mac, its name, time zone and last check-in, and your iPhones' push tokens, grouped by a hash of a key that lives only in your iCloud. See the iPhone privacy page.
- Emails you send us. What you write to [email protected], to answer you.
We don't sell or share personal data for advertising, and there are no third-party ads or trackers on rigspark.si.
Cookies
| Cookie | Purpose | Lasts |
|---|---|---|
__Host-rs_session | Keeps you signed in | 7 days |
__Host-rs_src | Where you first came from (first-party only) | 30 days |
Short-lived cookies (__Host-rs_oauth, __Host-rs_github) protect sign-in and the GitHub connection while they're in progress. Stripe sets its own cookies on its checkout pages.
Who processes data for us
| Provider | What for |
|---|---|
| Cloudflare | Hosting rigspark.si, our database and file storage |
| Stripe | Payments, invoices, tax calculation and the billing portal |
| Apple, Google | Sign-in (and Apple's push service for alerts) |
| GitHub | Only if you connect GitHub to your crew |
Each handles data under its own privacy terms. We may also disclose data if the law requires it, to protect our rights or users' safety, or to a buyer if RigSpark is merged or sold (and we'd tell you).
Where data is stored
RigSpark, Inc. is based in the United States, and our providers may process data in the US and other countries. Where data about people in the EU, UK or similar places is transferred, we rely on our providers' standard contractual clauses or equivalent safeguards.
How long we keep it
- Account, device and task statistics: while your account is open, and deleted within 30 days after you ask us to delete it.
- Raw website visits: 35 days, after which only daily totals remain.
- Billing records: as long as tax and accounting law requires (usually up to 7 years), held by Stripe and us.
- Alert records: deleted automatically after 30 days (Macs) or 60 days (iPhones) without a check-in.
Your choices and rights
Wherever you live, you can ask us to show you, correct, export or delete your data, or object to how we use it, by emailing [email protected] from the email on your account. We'll reply within 30 days. Depending on where you live (for example the EU, UK, California or India), you may have further rights under laws such as the GDPR, the CCPA or India's Digital Personal Data Protection Act, including the right to complain to your data protection authority. We don't sell personal information or use it for cross-context behavioural advertising. Signing out of the Mac app stops its reports; uninstalling it removes its local data.
Security
Data is encrypted in transit, sign-in uses OpenID Connect with state and nonce checks, accounts are stored under keyed hashes, and secrets live in encrypted storage. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.
Children
RigSpark isn't for children under 16, and we don't knowingly collect their data. If you think a child has given us data, email us and we'll delete it.
Changes
If we change this policy in a way that matters, we'll update the date above and tell signed-in users by email or in the app before the change takes effect.
Contact
RigSpark, Inc. · [email protected]