Privacy Policy

Last updated: February 2026

This Privacy Policy describes how Constellos ("we", "us", "our") collects, uses, and protects your information when you use our platform, website, APIs, and related services (the "Service").

1. Information We Collect

Account Information

When you create an account, we collect your email address and any profile information you choose to provide. If you sign in via a third-party provider (e.g., GitHub), we receive basic profile information from that provider.

Project Metadata

When you use the Service, you may store project metadata including decisions, conventions, configurations, and knowledge graph objects. This data is stored to provide the Service to you. We do not store your source code unless you explicitly provide it as content within the knowledge graph.

Usage Data

We automatically collect information about how you interact with the Service, including tool calls, feature usage, error logs, and performance metrics. This data is used to maintain and improve the Service.

Waitlist Information

If you join our waitlist, we collect your email address to notify you about product availability and updates.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Authenticate your identity and manage your account
• Send you product updates and communications you have opted into
• Monitor and analyze usage patterns to improve the product
• Detect, prevent, and address technical issues and abuse
• Comply with legal obligations

3. Data Storage and Security

Your data is stored on secure infrastructure provided by our hosting partners (Supabase, Cloudflare, Vercel). We use industry-standard security measures including encryption in transit (TLS) and at rest. Access to production data is restricted to authorized personnel only.

4. Data Sharing

We do not sell your personal information. We may share your information with:

• Service providers who help us operate the Service (hosting, analytics, email delivery), under confidentiality agreements
• Legal authorities when required by law or to protect our rights and safety
• Business transfers in connection with a merger, acquisition, or sale of assets, with notice to you

5. Local MCP Server

The Constellos stdio MCP server runs locally on your machine. When running in local mode, your data stays on your device and is not transmitted to our servers. The cloud service is optional and only activated when you explicitly connect to it.

6. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Export your data in a portable format
• Opt out of marketing communications at any time

To exercise these rights, contact us at hello@constellos.ai.

7. Cookies

We use essential cookies to maintain your session and preferences. We may use analytics cookies to understand how the Service is used. You can control cookie settings through your browser.

8. Children

The Service is not intended for users under 16 years of age. We do not knowingly collect information from children under 16. If we learn that we have collected such information, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy or our data practices, contact us at hello@constellos.ai.