This policy explains what data Core 137 collects, how we use it, and how we keep it safe. We try to be brief and plain — if anything is unclear, write to us.
We collect the minimum amount of data needed to run Core 137. That includes account data (name, email, workspace), product usage (events, telemetry) and content you choose to store on Core 137.
We never sell your personal data, and we never train shared models on your private workspace content.
We use your data to deliver Core 137 to you, secure it, improve it and bill you. Internal access is logged and scoped to people who need it for the task at hand.
We share data with a short list of subprocessors — cloud hosting, billing, support tooling and observability. The full list is on our subprocessors page and we notify you of additions.
You can access, correct, export and delete your data at any time from workspace settings, or by emailing privacy@core137.com. Residents of the EU, UK, California and Brazil have additional rights — we honour all of them globally.
We keep account data for as long as your account is active, plus a 30 day grace period after deletion. Logs are retained for 90 days, then anonymised for analytics.
Questions or requests? Email privacy@core137.com or write to us.
