Privacy policy

The short version

• PugPort runs on your computer. Your chats, history and usage records live in a local database there.
• To choose the right agent for each message, PugPort sends the message to our routing service by default. It also keeps a copy, with credentials removed, to train that service. You can turn this off, or switch to routing that sends nothing.
• An account is optional. If you sign in, PugPort syncs your chats between your computers. They are encrypted on your computer before upload, so we can't read them.
• We don't sell data, show ads or use tracking cookies. pugport.com has no analytics.

Your tasks

Your tasks go from your computer to the AI services you choose, such as Anthropic, OpenAI, xAI or Cursor, under their own terms and privacy policies. PugPort starts the command-line tools you have already signed in to. Your passwords and API keys stay on your computer.

Routing advice

Before PugPort picks an agent, our routing service, Laya, reads the request and suggests what kind of task it is and what it needs. With the default setting, PugPort Cloud, it sends us:

• your message, a short part of the recent conversation and any text you quoted;
• the names and types of attachments, but not their contents;
• the names of the agents that could take the task.

Before sending, PugPort removes credentials and file paths it can recognize. This works by matching known patterns, so it can miss some. The service answers and doesn't keep what you sent. Its log holds only the time, the result, how long it took, the size of the request and your country as reported by Cloudflare.

Help improve routing is on by default. It is off by default if you are in the EU, the EEA, the UK or Switzerland. While it is on, PugPort also saves each finished request for training: the items above, Laya's suggestion, which agent and model did the work, and whether it finished. Each saved request is linked to a random ID made on your computer, not to your account or email address. We keep saved requests for 2 years.

We never receive attachment contents, project files, file paths, API keys, logins for command-line tools, incognito chats, or chats in projects you set not to record.

You can change this in Settings:

• Turn off Smart routing → Help improve routing to stop saving. Requests are still sent for advice.
• Choose Advanced → Routing advice → Local Laya or Local rules only to send nothing to us.
• If you choose Jev there, your messages go to Jev's service under its terms instead.
• Delete my contributed data deletes everything saved under your computer's ID and starts a new ID.

Signing in with Google

You sign in with Google. Google shares your email address, name and profile picture with us. We use your email address to identify your account and show it in Settings. We don't receive your Google password, and we don't get access to Gmail, Drive or anything else in your Google account.

What syncs, and how it is protected

When you sign in, PugPort syncs:

• chats and their messages, and chat folders;
• projects, but not their folder paths or other settings tied to one computer;
• memories;
• preferences such as instructions, routing rules, theme, accent color and language.

Each item is encrypted on your computer with AES-256-GCM before it is uploaded. The key exists only on your computers. When you first sign in, PugPort gives you a recovery code. Your key is uploaded only after the recovery code has encrypted it, so we can't unlock it. A new computer needs the recovery code once. If you lose the recovery code and every signed-in computer, nobody can decrypt your cloud copy, including us. The chats on your computers are not affected.

What we can see

• Your account: email address, name and profile picture.
• Your devices: the device name shown in Settings, the operating system, when each device was last seen, and which supported command-line tools are set up on it (Codex, Claude, Grok and Cursor). We never receive the logins for those tools.
• For each encrypted item: what type it is (for example, a message), its ID, its size, and when it last changed.

We can't see what your synced messages, chat titles, projects or memories say. Routing advice is separate. It is described above.

What never leaves your computer

Logins for command-line tools, API keys, connector and MCP tool settings, project files and folder paths, images, imported history and incognito chats. Run records and usage statistics stay on your computer, except for the routing details described under Routing advice.

Where it is stored

Account and sync data and saved routing requests are stored with Supabase in Canada (AWS ca-central-1). Supabase also runs the sign-in service. We keep account data only while your account exists, and saved routing requests for 2 years. The routing service runs on a PugPort computer in Canada, reached through Cloudflare. We don't keep separate backups of your cloud data.

Deleting your data

In PugPort, open Settings → Account → Delete cloud data. This deletes your encrypted items, your device list and your encrypted key from our servers, and it can't be undone. The data on your computers stays. To delete the account itself, write to hello@pugport.com from the email address you sign in with.

pugport.com

If you ask to be notified when PugPort is ready to download, we store your email address, which button you used, the wording you agreed to, and the country Cloudflare reports for your connection. We use your email address only to send you that notice. Write to us and we'll remove it. We also use your IP address briefly to stop abuse of the form, and we don't store it. Cloudflare hosts the site and processes standard request data to serve it.

Children, changes and contact

PugPort is not meant for children under 13. If this policy changes, we'll update the date above and announce important changes on this site and in the app. Questions go to hello@pugport.com.