Privacy Policy

Overview

StatsAI provides a hosted private dashboard for tracking AI-assisted development usage. We are designed around metadata-only sync: your prompts, raw log lines, and local file paths stay on your devices by default.

This policy describes what the hosted StatsAI service at statsai.dev collects, how we use it, and the choices you have. The open-source CLI is governed separately by its source license; this policy applies to the hosted dashboard, API, and account features.

Information we collect

When you use the hosted service, we may collect:

• Account information from your sign-in provider, such as your name, email address, and profile image when you authenticate with Google or GitHub.
• Device session data when you pair a machine through the CLI, including a device name, device identifier, and tokens used to authorize sync.
• Sanitized usage rollups synced from your devices, such as daily token totals, request counts, provider and model breakdowns, estimated API-equivalent cost, account labels, subscription periods, and hashed identifiers used for deduplication.
• Dashboard preferences you save in the product, such as privacy mode and public profile settings if you enable them.
• Basic operational logs from the hosted API needed to operate, secure, and debug the service.

Information we do not collect by default

The production sync path is designed to strip sensitive local evidence before data reaches our servers. We do not intend to receive:

• Prompts or conversation content.
• Raw JSONL log lines from your AI tools.
• Local file paths or source record identifiers in plain text.
• Parse evidence such as source line numbers.
• Private notes attached to subscriptions.

How we use information

We use collected information to authenticate you, store and display your usage dashboard, deduplicate synced records, operate device pairing, provide support, keep the service reliable, and protect it from abuse.

We may review aggregated operational metrics and service logs to debug outages and improve performance. Those metrics are about the service itself, not advertising profiles, and they are not sold.

Estimated cost figures shown in the dashboard are API-equivalent calculations for analytics. They are not invoices and should not be treated as definitive billing records from AI providers.

What we do not do

• We do not sell your personal information or synced usage rollups.
• We do not use your dashboard data for third-party advertising or cross-site tracking.
• We do not share your private usage rollups with other customers, data brokers, or marketing platforms.
• We do not receive your prompts or raw local logs through the default production sync path.

How information is shared

We share data only with service providers that help us run StatsAI, and only for operating the product:

• Infrastructure providers that host the StatsAI API and web app, currently including Cloudflare, acting as processors on our instructions.
• Authentication providers you choose when signing in, such as Google or GitHub.
• Public profile content you explicitly choose to publish through shareable profile features.

Data retention and security

We retain account and synced rollup data for as long as your account remains active and as needed to provide the service. You may contact us to request deletion of your hosted account data.

We use industry-standard measures appropriate to the service, including authenticated API access, device-scoped tokens, and transport encryption. No method of storage or transmission is completely secure.

Your choices

• You can review what the CLI would sync before sending it locally with sync --dry-run, sync --sink file, or sync --verify.
• You can revoke device access from the dashboard settings.
• You can enable privacy mode in the dashboard to blur sensitive on-screen values.
• You can contact us to request access, correction, or deletion of hosted account data.

Changes and contact

We may update this policy as the product and sync contract evolve. Material changes will be reflected on this page with an updated date.

Questions about privacy can be sent to hello@statsai.dev.