LockpinPrivacy policy
Lockpin is a program that runs on your own computer or server and limits what your AI agents spend. This policy covers that program, the website lockpin.dev, the hosted dashboard app.lockpin.dev, and the mailbox below. Lockpin is run by Connor Raymer, Florida, USA ("we"). Contact: privacy@lockpin.dev.
The Lockpin program
Unless you turn on reporting to the hosted dashboard (below), the program sends us nothing. It needs no account and has no update check or telemetry. It talks to:
- The AI provider you choose (for example Meta, OpenAI or Anthropic). It passes your agent's requests and your API key to that provider, and for a few providers asks their token-count endpoint about a request that is close to its budget. What the provider does with your data is set by the provider's own terms, not ours.
- Slack or a webhook URL you give it, if you set one, to deliver spend alerts. An alert holds the names of tasks, keys and tags, dollar amounts, and for drift alerts a file name from your project.
- A price-catalog URL you give it, if you set one.
- Our dashboard's ingest service, only if you turn reporting on with a workspace credential. What it sends is described under "The hosted dashboard".
On your own machine it stores spend records (task, key, user and tag names, provider, model, token counts, cost, timings), key hashes, and, only if you turn drift tracking on, a copy of your project files and a 300-character excerpt of the first request of each session. We cannot see any of it. With reporting on, it also keeps a copy of each upload next to its spend records, so you can check what left the machine.
The website
lockpin.dev is a static site. It sets no cookies, uses no analytics and stores nothing in your browser. It is served by Cloudflare, which keeps ordinary request logs (such as your IP address) to run and protect its service. The fonts are hosted on the site itself, so no other company receives your details when you view it.
The hosted dashboard
The dashboard is optional. The program works, and enforces your limits, without it.
What we receive. When you sign in or create a workspace: your email address, the account type you chose (personal or business) and a workspace name. When you turn reporting on: spend numbers and names from your machines (provider, model, key name, request and token counts, costs, timing, a machine id and the program version), and your keys' names, dollar limits and the default task budget. The machine id is a random number made once per install, not derived from the machine or from you. At the "tags" detail level also tag values and a pseudonymous task id; at "tasks", task names. We never receive prompts, responses, file contents, or your provider API keys. The upload format is a closed list of fields.
What we store in your browser. Only the cookies the service needs; see the cookie notice.
Who processes it for us.
| Company | Why | What they see |
|---|---|---|
| Fly.io | Runs the dashboard and ingest service | Everything the service handles |
| Supabase | Database and sign-in (email codes, passwords, Google or GitHub sign-in) | Email addresses, workspace data, spend records |
| Resend | Delivers sign-in and confirmation emails | Your email address and the code email |
| Cloudflare | Serves lockpin.dev and its DNS | Ordinary request logs |
| Stripe (when billing is on) | Payment for paid plans | Your email, plan and payment details; we never see card numbers |
| Zoho Mail | Our mailbox (privacy@lockpin.dev) | Email you send us |
Payments. Payment details are entered on Stripe's pages, not ours. We keep your Stripe customer and subscription ids, plan and renewal date. A failed or cancelled payment never changes how your local limits work.
How long we keep it.
| Data | Kept |
|---|---|
| Hourly spend records | 35 days |
| Daily spend records | 90 days on Individual; 13 months on Pro and Business |
| Alerts | 13 months |
| Upload ids (to drop duplicate uploads) | 24 hours |
| Sign-in sessions | Deleted when they expire (7 days) |
| Your account, workspace, members, invites, keys (name, settings and a hash of the secret), budgets, alert rules, billing records and the workspace change log | Until you delete the workspace or ask us to; then removed within 30 days |
| Backups | A deleted record leaves every backup within 30 days of the deletion |
Deleting your data. Write to privacy@lockpin.dev from the address on your account and we delete your account, or your whole workspace if you own it, within 30 days, backups included. Records we must keep for tax or fraud reasons (Stripe invoices) are kept for the period the law requires.
Email you send us
If you write to privacy@lockpin.dev, we keep the message and your address for as long as needed to answer and for one year after. We do not sell it or use it for marketing.
Your rights
You may ask to see, correct or delete the personal data we hold about you, or to receive a copy of it. Write to privacy@lockpin.dev from the address on your account; the owner answers within 30 days. The hosted dashboard is offered to customers in the United States. We do not sell personal data and do not share it for advertising. Unless you use the hosted dashboard, the program sends us nothing, so most of what you might ask about is on your own machine.
Children
Lockpin is a tool for developers and businesses. It is not for people under 13, and we do not knowingly collect their data. If we learn that an account belongs to someone younger, we delete it.
Changes
We will change this policy before we collect anything new, and update the date above. Material changes are announced on the dashboard.
Contact
Connor Raymer, Florida, USA
privacy@lockpin.dev