Privacy Policy

Craicked LLC (“we”, “us”) runs Gaffer. This policy explains what personal information we collect when you use this website, the Gaffer app at app.teamgaffer.com, and Gaffer’s runtime on your computers, and what we do with it.

What We Collect

Your account. Your name and email address, and a hashed password if you set one. If you sign in with GitHub or Google, we receive your name, email address and the basic profile details that service shares.

Your workspace. What you and your agents put on the board: projects, cards, briefs, comments, questions and answers, rules, and the names of your repositories, branches and pull requests, with their CI and review status.

What the runtime reports. The runtime tells the app about the machines and clones you connect: each machine’s name, each clone’s folder, branch and state, which agent session is working on which card, which tool a session is using, when it is waiting on you, any errors it hits, and the words of a question an agent asks you. It never sends your prompts or your source code.

Billing. Stripe handles payments. We receive the card’s brand, last four digits and expiry date, any billing name, address and tax ID you give, and your payment history. We never see or store your full card number.

How you use the app. While you are signed in, we record your visits and actions in the app, with your IP address and browser and device type, to run and improve the Service and to keep it secure.

Error reports and email. When something goes wrong, the app sends technical details of the error to our error tracker. When we email you, our email provider records whether the message was delivered.

This website. www.teamgaffer.com sets no cookies and runs no analytics. Our host, Cloudflare, processes your IP address to serve the pages.

How We Use It

• To provide the Service: show your board, run the work you set up, and bill your account.
• To answer you when you contact us.
• To send messages about your account, such as receipts, failed payments and changes to these policies.
• To keep the Service secure and prevent abuse.
• To understand how the Service is used, so we can improve it.

We don’t sell your personal information, we don’t use it for advertising, and we don’t use your content to train AI models.

AI Providers

Gaffer’s servers don’t send your content to AI providers. Your agents run on your own computers through your own Claude Code or Codex account, so what they send to Anthropic or OpenAI is covered by your agreement with them.

Who We Share It With

We share personal information only with the providers that help us run Gaffer, and only what each needs:

• Stripe: payments and billing.
• Fly.io: hosts the app and its database.
• Cloudflare: our domain, email routing, file storage and this website.
• Mailgun: sends our email.
• Sentry: error tracking.
• GitHub and Google: sign-in, when you choose them.

People in your Gaffer account can see your workspace content. We may also disclose information when the law requires it, to protect our rights or someone’s safety, or as part of a sale or merger of our business, in which case this policy continues to apply.

Where Your Data Is Stored

We and our providers store and process data in the United States. If you use Gaffer from elsewhere, your information is transferred to the United States.

Cookies

The app uses only the cookies it needs to sign you in, keep your session and protect forms. This website uses none.

How Long We Keep It

We keep your information while your account is open. If you ask us to delete your account, we delete or anonymize your personal information within 90 days, except billing records and anything else the law requires us to keep.

Your Choices and Rights

You can see and update your account details in the app at any time. To get a copy of your information, correct it, or have it deleted, email support@teamgaffer.com. We answer within 30 days. Depending on where you live, for example in the EU, the UK or California, you may have further rights, such as to object to how we use your information, or to complain to your data protection authority.

Security

We use encryption in transit, hash passwords, and limit who can reach production systems. No system is perfectly secure, so please tell us at support@teamgaffer.com if you find a problem.

Children

Gaffer is not for children. You must be at least 18 to create an account, and we don’t knowingly collect information from anyone younger.

Changes to This Policy

If we make a material change, we will tell you by email or in the app before it takes effect. The date at the top of this page shows when it last changed.

Contact

Email support@teamgaffer.com, or write to Craicked LLC, 921 Magellan Ct, Oneida, WI 54155, United States.