Privacy notice

How Farstax collects, uses, shares and keeps personal information, and the choices you have.

Who we are

Nick Constantinou, trading as Farstax is the controller of the personal information described here. Based in England, United Kingdom. Contact us about privacy at privacy@farstax.com. Do not post personal data in a public issue.

What we collect

A waitlist submission contains an email address. A beta application can also include name, GitHub username, coding-agent choices, intended use and feedback preference. Signing in creates an account linked to your GitHub identity and email address, and stores your GitHub authorization so your workspaces can reach the repositories you allow. Operating a workspace generates service state, infrastructure identifiers, events, support diagnostics and the credentials needed to run it. Feedback you send is stored with its context.

Why we use it and our lawful bases

We use account, connection and workspace information to provide the service you asked for (performance of a contract). We use waitlist and beta application details to assess and contact prospective beta users, and service diagnostics and logs to keep the service secure and working (legitimate interests). We use anonymous analytics to understand how the site and beta are used (legitimate interests); you can object at any time. Where billing is enabled, billing records are kept to meet legal obligations.

Who receives it

We use DigitalOcean to host Farstax and workspace servers; GitHub for sign-in and repository access; Cloudflare for domain, network and email-routing services; Resend for email verification messages; and PostHog for anonymous analytics, currently hosted in the United States. Paddle billing is not currently enabled. If you use the Farstax Telegram bot, Telegram receives the messages needed to provide that service. If you select an AI provider or connect another messaging service in a workspace, that service receives the prompts, messages, files or source code needed for the connection. Those providers process information under their own terms; Farstax does not control their training, retention or regional processing. Some of these services may process information outside the United Kingdom, including in the United States. Read their privacy information for their processing locations and transfer arrangements.

How long we keep it

InformationHow long we keep it
Waitlist entries and beta applications12 months after the last update, then deleted
Feedback you send us12 months, then deleted
Account, GitHub sign-in identity and stored GitHub authorizationUntil you delete your account
Sign-in sessions30 days, or until you sign out; removed within a day
Sign-in, GitHub installation and email verification codes10 minutes; removed within a day
Workspace setup tokens1 hour; removed within a day
Workspace records and event historyWhile the workspace exists, then 30 days after its destruction is confirmed
Workspace server contents (code, sessions, Workspace Secrets, logs)Deleted with the server when the workspace is destroyed
DigitalOcean daily backups of a workspace server and of the Farstax serviceCurrently retained for 7 days. A backup of a destroyed server can remain until that period ends
Farstax service logs and workspace server system logs14 days, with a size limit; security logs up to 90 days
Logs your agents and software create inside your workspaceKept in the workspace and deleted when it is destroyed
Anonymous analytics eventsNew events contain no account or persistent visitor identifier. We do not make a fixed public provider-side retention promise until the PostHog retention setting is verified

Deleting your account

You can delete your account from the Account page after signing in; if you have a paid subscription, cancel it in Billing first. Deletion signs you out everywhere, removes our stored GitHub authorization (we also ask GitHub to revoke it), destroys your workspaces through the normal teardown, and once teardown is confirmed deletes your account, sign-in identity, workspace records, feedback and matching waitlist or beta entries. Repositories remain in your GitHub account; you can remove the Farstax GitHub App in your GitHub settings. Backups expire as described above and are not restored for deleted accounts. Records may be kept longer only when needed for an active security incident, a legal claim or legal obligations.

Cookies, local storage and analytics

Farstax sets a sign-in session cookie when you sign in and, if you object to analytics, a cookie that remembers that choice. Your light/dark theme preference is kept in your browser's local storage. We do not use analytics cookies or analytics local storage. When analytics is enabled, new page-view, button-click and sign-in or form-submission outcome events are sent to PostHog with a new random identifier for each event and without an account or persistent visitor identifier. You can object on the Analytics choices page; we also honour Global Privacy Control and Do Not Track browser signals. We will update this notice when the planned EU PostHog project and its retention setting have been verified. Totals of new accounts and beta acceptances are counted on our servers without an analytics identifier.

Your rights

You can ask to access, correct or delete your personal information, to restrict or object to its use, or to receive it in a portable form, by emailing privacy@farstax.com. We may need to verify your identity. If you are unhappy with how we handle your information, you can complain to the UK Information Commissioner's Office at ico.org.uk.