Data Usage Policy

What Data We Process

• Authentication data: OAuth tokens and session cookies for user identity
• Device identifiers: Cryptographic device keys, used to confirm a device is the one it claims to be
• Workspace metadata: The names of directories you explicitly publish, and their paths where the device reports one. A folder shared from a browser tab reports its name only, because the browser does not disclose its location
• Usage records: Tool call metadata (tool name, timestamp, credit cost, success/failure status)
• Billing data: Credit balance, purchase history, and payment references
• Audit records: What was done to an organization, by which account, from which IP address and browser, and when
• Product usage data: Pages visited, actions taken, errors encountered, and CLI lifecycle events, linked to your account. See the privacy policy for the detail

What We Do NOT Store

File contents are never stored on DeviceLink servers. When a connected AI platform requests a file, the content is streamed in real-time from your device through our service and is not persisted, cached, or logged. Tool arguments and file paths are not written to our analytics or audit records either - those record the tool name and result only.

Traffic is encrypted in transit with TLS. Passing a request along means our service decrypts it, so file contents exist in server memory for as long as it takes to forward them. They are never written to disk, cached, or logged.

Data Processing Location

DeviceLink follows a local-first architecture. File operations happen on your device. Our cloud infrastructure handles authentication, device routing, billing, and MCP protocol bridging. Our application servers run in the Stockholm region, and product analytics is processed in the European Union. The hosting, database, cache and analytics providers behind that, and where each one processes data, are named on the subprocessors page.

Data Retention

• Account data: Retained while your account is active
• Device registrations: Retained until you revoke or delete the device
• Usage charge records: Retained while your account is active for billing purposes
• Authentication tokens: Short-lived with configurable expiration; automatically cleaned up
• Audit records: Retained while the account is active, and kept after deletion where needed as a record of security-relevant activity

You can delete your account at any time from the Danger Zone on your profile page, or ask us on the support page. Deletion removes your sign-in identities, closes your personal organization and its workspaces, ends your other memberships, and revokes your devices and connected AI clients. Billing records and audit entries are retained - the full detail is in the privacy policy.

Third-Party Services

We use providers for sign-in, product analytics, payment processing, hosting, our database and our cache. Each one, what it is used for, what it processes and where, is listed on the subprocessors page, which is kept as the single authoritative list so that it cannot disagree with this one.

Your Control

• End file access at any time: stop the agent, or close the browser tab you shared from. You can also disconnect a device, or remove a shared folder, from your dashboard
• Choose exactly which directories to share
• View your usage history and billing at /profile
• Request a copy of your data or request deletion via the support page

Changes to this page

• October 2026 - Described how to end access for a folder shared from a browser tab. Clarified that a folder shared from a browser reports its name but not its path. Replaced the duplicated provider list with a link to the subprocessors page.