laystarPrivacy Policy
What we store
- Account: your username, display name and password. The password is stored only as an Argon2id hash. We don't collect email addresses or phone numbers.
- Your content: tasks, projects, uploaded files and screenshots, pasted text, and what gets generated from them.
- Model settings: the endpoints and model names you configure, and your API keys, encrypted at rest.
- Session: one cookie that keeps you logged in. No advertising or third-party analytics cookies.
What we use it for
Running laystar for you: storing and showing your data, keeping you logged in, and calling the model provider you configured when you ask it to. We don't sell your data and we don't train models on it.
What goes to model providers
Only what you send, when you send it: suggestions, transcription, command-palette questions. Text, images and audio are separate opt-ins. Providers handle that data under their own policies.
Storage and retention
Web workspaces are stored on our server and are only reachable through your account. Deleting your account deletes the account and the workspace with it. The desktop app stores everything on your machine.
Security
HTTPS everywhere. Workspaces are isolated per account. API keys are encrypted at rest. The web edition only connects to public https model endpoints.
Your controls
View, edit and delete your data in the app at any time, or delete the whole account under Settings → Account.
Changes
If this policy changes, this page and its effective date change with it.