Privacy

Last updated 22 October 2026

We store what is needed to run shared sessions: your GitHub profile, an encrypted GitHub token, and the history of the sessions you take part in. We send session content to Anthropic so the agent can work. We do not sell data, show ads or use third-party trackers.

What we collect

Your GitHub account: user id, login, display name, avatar and the organisations you belong to, received when you sign in with GitHub.
A GitHub access token with the read:user, read:org and repo scopes, so the agent can clone and push the repositories you start sessions on. It is encrypted at rest with AES-256-GCM and never shown in the app.
Session history: the task, messages, suggestions, comments, reactions, approvals, file edits, and the agent's steps including command output and diffs of your code.
Two cookies: a signed login cookie and a short-lived cookie that protects the GitHub sign-in. No analytics or advertising cookies.
Server logs: request paths, times and errors, kept for up to 30 days to run and secure the service.

Your code

Each session clones the repository into an isolated container. The container and its storage are deleted when the session ends. Code that the agent reads, and the changes it makes, appear in the session history so teammates can review them.

Who we share it with

Anthropic processes session content (the task, messages and the code and output the agent works with) to run the Claude model. Under Anthropic's commercial terms, API inputs and outputs are not used to train their models.
GitHub, to sign you in and to clone and push repositories you choose.
Our hosting provider, which runs the servers and database in the European Union.
People you invite to a session see that session's history.

We share nothing else, except where the law requires it.

How long we keep it

Session history is kept so your team can come back to it, until you ask us to delete it or your account. Account data is deleted within 30 days of a deletion request. Backups roll off within a further 30 days.

Your choices

Revoke huddle's access at any time in GitHub under Settings, Applications.
Ask for a copy of your data, a correction or deletion by writing to privacy@gethuddle.dev. We reply within 30 days.
If you are in the EU or UK you can also complain to your data protection authority.

Changes

If this policy changes in a way that matters, we will say so in the app before it takes effect.