SageOx

Privacy Policy

Last Updated: October 13, 2026

Overview

SageOx provides open-source tools and a hosted service at sageox.ai. This policy explains how we handle your data.

Data We Collect

Code and Content

When you use SageOx, we may receive feature usage patterns, code snippets, team context, coding agent conversations, AI assistant conversations, agent conversations, and project information you and your agents share with the service. This data is used to provide SageOx functionality to you.

Coding Agent Sessions

Sessions between you and AI coding agents that are integrated with the SageOx CLI are captured and may be shared with other members of your team and with your team's agents that you have enabled to access your team context. This allows teams to collaborate and maintain context across workflows. When your coding agent reads from SageOx, the team context it retrieves is sent to that agent's provider and is handled under your agreement with that provider.

AI Agent and Assistant Conversations

When you connect to SageOx using MCP from an AI assistant or agent, such as Claude, ChatGPT, Figma, or Muse, the agent can read your team's context. Conversations between you and the agent are saved to SageOx, unless you explicitly opt out. Saved content can include conversation turns, summaries, plans, mockups, and decisions. Content is available to users and AI coworkers according to the permissions and sharing settings defined by your team and your workspaces. When the assistant reads from SageOx, the team context it retrieves is sent to that assistant's provider and is handled under your agreement with that provider.

Meeting Recordings and Transcripts

You can record meetings, conversations, and visual context with SageOx in four ways:

  • SageOx hardware devices for in-person meetings, such as the SageOx Dot
  • SageOx apps for mobile, watch, and other personal devices
  • SageOx desktop apps, which access your microphone and your computer's audio and video. That means they can also record other people on a call, such as participants joining through Zoom.
  • SageOx Console in your browser

Across all of the above surfaces, recorded audio and/or video is sent to SageOx only after you explicitly start a recording. SageOx apps require you to download and install them. SageOx Console runs in your browser and does not require an app download. Apps and the browser Console require you to grant microphone, camera, or screen-sharing access, as applicable.

Active Recording. Across all surfaces, active recordings are clearly indicated:

  • SageOx Dot shows a clear status indicator on its screen whenever it is recording audio that will be sent off the device.
  • SageOx Console and SageOx apps on your mobile, watch, personal devices, and desktop show a recording indicator. Your operating system or browser may also show its own microphone or camera indicator.

SageOx Dot rewind. While SageOx Dot is powered on, it keeps a short rolling buffer of up to the last 20 minutes of audio on the device. The buffer is continuously overwritten and is not stored or sent off the device unless you start a recording. When the user starts a recording, the buffered audio from the buffered minutes can be included if explicitly selected by the user. This feature is controlled by the user and the recording buffer can be turned off for each device.

These indicators are only visible to whoever has a line of sight to the screen of the recording device. If a device is hidden out of view or used for recording others who are connected through virtual meetings (e.g., via Zoom), they will not be automatically notified that they are being recorded. By using the recording feature, you are responsible for obtaining any necessary consent from meeting participants and complying with laws in applicable jurisdictions.

As you record, audio and/or video is streamed to SageOx's servers. It is further stored, and processed by the AI services we partner with listed under Data Sharing. They produce transcripts, live captions, summaries, decisions, speaker attribution, search indexes, and other derived content for your workspace, so that your team and its AI coworkers have context. Recordings and transcripts are available to members of your team according to your team's permissions and sharing settings.

Usage Data, Telemetry, and Error Reporting

When you use SageOx, including the SageOx apps, the SageOx Console, SageOx devices, and the SageOx CLI and MCP, we automatically collect operational metrics and usage data. This can include:

  • the features you use and actions you take
  • performance and reliability metrics
  • device, operating system, browser, and app version
  • IP address
  • identifiers that link this activity to your account

We use this data to operate, secure, and improve SageOx. It is processed by our own systems and by the analytics and observability providers listed under Data Sharing, such as PostHog (product analytics), Honeycomb (traces and metrics), and Sentry (errors and crash reports).

We also log errors to help us identify and fix issues. Logs and crash dumps may include technical context but are kept separate from your code content.

Bot Protection

We use Cloudflare Turnstile during account signup to distinguish people from automated traffic. Turnstile processes the technical data needed to provide this security check and does not access your form entries. Cloudflare processes this data under its Turnstile Privacy Addendum.

Data Retention

We keep your content, including recordings, transcripts, sessions, conversations, and derived content, for at least as long as your account or your team's workspace is active, so your team can return to it whenever it needs to. You can delete your content at any time, including after you stop using SageOx, by emailing privacy@sageox.ai. Deletion is handled as described in Your Rights. If an account or workspace is inactive for 3 years, we may delete its data after notifying the account owner.

Telemetry and logs are kept only as long as needed to operate, secure, and improve SageOx, and in line with our providers' retention periods.

De-identified data used to improve SageOx, as described below, may be kept after the original content is deleted.

How We Use Your Data

  • To provide and improve SageOx. We use your data to run SageOx for you and your team, and to improve the SageOx service. Over time, this may include training AI models on data from SageOx. When we do, we are interested in how teams work: patterns in how people and AI agents collaborate, make decisions, and share context. We are not interested in the substance of your business. Before using data for training, we remove or de-identify names, code, and other identifying content. We will not use training to surface one team's content to another team. If you don't want your team's data used for training, contact us at privacy@sageox.ai to discuss options.
  • We don't sell your data for marketing. We don't sell or share personal information for targeted advertising.
  • Our staff don't access your content except when needed to provide support you request, to troubleshoot or maintain the service, to keep the service secure, or when required by law.
  • We don't use your content or data to extract competitive insights about your company or your business domain.

Data Sharing

We share data with legal authorities if required by law. We use service providers and subprocessors to operate SageOx. Where applicable, they process information on our behalf under contractual restrictions governing their use of that information. We also share data where you direct us to, such as when you publish to Slack or connect an AI assistant through SageOx MCP. If SageOx is involved in a merger, acquisition, or sale of assets, data may be transferred as part of that transaction.

Providers that receive your content

  • Amazon Web Services (US data centers) — receives recordings, transcripts, and derived content, for hosting and storage. Anthropic Claude models on Amazon Bedrock generate summaries and decisions, Amazon Titan models on Bedrock generate search embeddings, and Amazon Textract extracts text from uploaded PDFs and images for search.
  • Deepgram — receives recording audio, for speech-to-text transcription.
  • Zoom (Scribe Live) — receives audio as it is recorded, for live captions during a recording.
  • Google Gemini — receives text derived from transcripts, for mural image generation.
  • Turbopuffer — receives transcript text and search vectors, for the search index.
  • Slack — receives the distillations you choose to publish, for publishing to your own Slack workspace.
  • Resend — receives your email address and the text of notifications, for transactional email.
  • OpenAI — receives session and repository content inside an AI coworker sandbox, for AI coworker execution.
  • E2B — receives repository content, for AI coworker sandboxes.

Providers that receive usage data, metadata, or identity only

Honeycomb (traces and metrics), PostHog (product analytics and feature flags), Sentry (error and crash reports, which can include user IDs and URLs), incident.io (alert payloads), Cloudflare Turnstile (bot check at signup), and the sign-in provider you choose (GitHub, Google, Apple, or Slack). If you buy from our shop, Shopify processes your order and payment data; if you apply for a role, Ashby processes your application.

Security

Data is encrypted in transit using TLS and at rest using AES-256 encryption. Your data is stored in the United States. Some of the service providers listed above may process data in other countries to provide their services.

Your Rights

You can request to access or delete your data by emailing privacy@sageox.ai. If you choose to delete your account, you will immediately lose access to all of the content in your account. Unless your Team has other members, all of the meeting data and agent sessions owned by your account will also be immediately deleted. Deleting your individual account does not necessarily delete content you contributed to a team workspace. Content owned by a team workspace may remain available to that workspace and its authorized members. Deleted data is removed from our active systems immediately and from backups within 30 days.

If you were recorded by a SageOx user and don't have a SageOx account, you can contact privacy@sageox.ai with questions or requests about that recording.

Children

SageOx is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact privacy@sageox.ai and we will delete it.

Contact Us

SageOx, Inc.
Seattle, Washington
privacy@sageox.ai