Privacy Policy

Last updated: August 1, 2026

This policy explains what data mebo collects when you use the mebo desktop application, the mebo.dev website, and the services behind them — why we collect it, who we share it with, and the choices you have. The short version: your projects live on your machine, we send AI providers only what's needed to answer your requests, we don't run ad trackers, and we don't train AI models on your code.

What we collect

Account information

When you sign up, our authentication provider (Clerk) collects your email address, name, and sign-in credentials or OAuth identity. We link this to a customer record so we know which plan and credit balance is yours.

Billing information

Payments are handled by Stripe. Your card details go directly to Stripe and never touch our servers; we receive and store your subscription status, plan tier, invoice history, and the last four digits of your card for support purposes.

Prompts and project context

When you ask the agent to do something, the app sends your prompt — together with the relevant parts of your project (file contents, file names, editor state, error output) — through our backend to the AI model provider serving your chosen model. This is the core of the product: the model can't help with code it can't see. If you use semantic project search, snippets of your code are also sent to our embeddings provider (Voyage AI) to build the search index. We pass this content through to produce your response and meter usage; we do not use it to train models, and our provider agreements prohibit them from training on it either.

Usage and credit metering

We record per-request metadata — which model you used, token counts, credits consumed, and timestamps — to enforce plan limits, show you your usage, and bill correctly.

Feedback

If you send feedback from the in-app dialog, we receive what you write, and — only if you choose to attach them — a screenshot and/or the recent chat transcript. This goes to our team so we can act on it.

Affiliate program

If you arrive via a referral link, we set a cookie recording the referral code so the referrer gets credit if you subscribe. If you join the program, we collect what's needed to pay commissions.

What we don't collect

No advertising trackers or third-party analytics scripts on the website or in the app.
No scanning or uploading of your projects in the background — project content leaves your machine only when you invoke the agent or indexing on it.
No sale of personal data. Ever.

Who we share data with

We share data only with the processors that make the Service work:

AI model providers (such as Anthropic and Google) — receive your prompts and project context to generate responses.
Voyage AI — receives code snippets for semantic-search embeddings, if you use that feature.
Clerk — authentication and account management.
Stripe — payments, subscriptions, and invoices.
Hosting and infrastructure providers — run our backend, database, and website.

We may also disclose data if the law requires it, or as part of a merger or acquisition — in which case this policy continues to apply to data collected under it.

Retention

Account and billing records are kept while your account is active and as long as tax and accounting law requires afterwards. Usage-metering records are kept to support billing history. Prompts and project context are processed to serve your request and are not retained as a product feature; short-lived operational logs are periodically deleted. Feedback submissions are kept until resolved and then archived or deleted.

Your rights and choices

You can access and update your account details, and cancel your subscription, from the account page.
You can request a copy of your data, or deletion of your account and associated data, by emailing support@mebo.dev. We'll act on deletion requests within 30 days, except records we must keep by law.
Depending on where you live (for example the EU/EEA, UK, or California), you may have additional statutory rights — access, correction, portability, deletion, and objection to processing. Contact us and we'll honour them.

Security

Data in transit is encrypted with TLS. Access to production systems and data is limited to people who need it to operate the Service. No system is perfectly secure — if we learn of a breach affecting your personal data, we'll notify you as required by law.

Children

The Service is not directed at children under 13, and we don't knowingly collect their personal data. If you believe a child has created an account, contact us and we'll delete it.

Changes to this policy

We'll update this page as the Service evolves and bump the date at the top. For material changes we'll give notice in the app or by email before they take effect.

Contact

Privacy questions and requests: support@mebo.dev. See also our Terms of Service.