Privacy Policy

Introduction

Lobu is open-source infrastructure for long-running AI teammates. We are committed to protecting your privacy and being transparent about the data we collect and how we use it.

Self-Hosted Deployment

When you self-host Lobu, you have full control over your data. All conversations, agent configurations, and associated data are stored on your own infrastructure. We do not have access to any data from self-hosted deployments.

Cloud Service

For our managed cloud service, we collect and process the following data:

• Account Information: Email address and optional profile information you provide
• Workspace Data: Agent configurations, conversation history, and connected platform credentials
• Usage Data: API calls, message counts, and performance metrics for service monitoring and billing
• Platform Credentials: Bot tokens and OAuth credentials for Slack, Telegram, and other platforms

Data Sharing

We do not sell your data to third parties. Your data may be shared with:

• AI Model Providers: Messages sent to AI providers (Anthropic, OpenAI, etc.) are processed according to their respective privacy policies
• Service Providers: Infrastructure and analytics services that help us operate the platform

Data Security

We use technical and organizational safeguards, including encryption in transit and where configured at rest, workload isolation, access controls, and audit logging. Credential handling is designed to keep provider secrets out of agent prompts and worker environments where supported.

Data Retention

Conversation history and workspace data are retained for the duration of your account. You may request deletion of your data at any time by contacting us or using the account deletion feature.

Your Rights

You have the right to access, correct, or delete your personal data. You may export your workspace data or close your account at any time from the application settings.

Cookies and Analytics

Optional website analytics load only after you choose “Allow analytics.” You can decline without losing site functionality and change your choice at any time using “Analytics settings” in the footer.

Embedded Content

Some blog articles display public posts using X's official embedded-post widget. The widget loads only when it approaches the viewport and may send X the page you visited, your IP address, browser details, and cookie information. If the widget is blocked or unavailable, Lobu shows a local text fallback instead. See X for Websites for details.

Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect information from children under 13.

Browser Extension (Owletto for Chrome)

The Owletto Chrome extension connects a Chrome profile to an Owletto agent that you run, either self-hosted or on Lobu Cloud. Its single purpose is to let that agent see and act on your browser on your behalf. All data it reads is sent only to the gateway URL you configure during pairing; it is not collected by, routed through, or stored on any separate Owletto-operated server, and it is never sold or shared with third parties.

With your permission the extension can access: your open tabs; the content of pages on sites you explicitly grant access to (read via Chrome's debugger API to let the agent act on those pages); and, only if you opt in from the extension's Permissions panel, your browsing history, bookmarks, and download history. Site access is off by default. You grant it per site, or all sites, by an explicit click in the panel, and every permission can be revoked at any time. The extension does not use remote code, and it accesses sites only to carry out the actions you ask your agent to perform.

Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be communicated through our website or via email for cloud service users.

Contact Us

For questions about this privacy policy or your personal data, contact us at: