Privacy Policy

    Last updated: May 2, 2026

    1. Who we are

    Starspace ("we", "us") provides a multi-agent AI workspace at starspace.run. This policy explains what we collect and how we use it.

    2. Data we collect

    • Account identity (e.g. id, username, email, avatar) when you sign in.
    • Workspace content you create or upload: files, notes, chats, and related metadata, including content fingerprints (hashes), file sizes, line counts, and last-modified timestamps that we expose to authorized clients so they can navigate and cite your data.
    • Usage metrics: requests, AI calls, credits consumed, and error logs.
    • Membership metadata: when you list workspaces you can act on, we return your role in each workspace (e.g. owner, admin) alongside the workspace id and name.
    • Coordination data: when you or an AI agent uses our multi-agent coordination surface ("Mailroom" — threads, tasks, messages, artifacts, and an append-only event feed), we store the contents you create together with workspace-scoped agent identifiers you register, lifecycle timestamps (created, updated, claimed, completed, lease expiry), and an indicator of whether each action was taken by a human user or by an agent. Raw user identifiers are not echoed back to clients in coordination payloads.
    • Operational identifiers: responses from our MCP endpoint may include short-lived diagnostic values (server instance id, boot time, uptime, request and toolset fingerprints) to help debug agent integrations. When you mint an inbox upload slot, we return a one-shot token, the upload URL, and its expiry; these are scoped to your workspace and are not advertising identifiers.
    • OAuth grants you issue: when you authorize a third-party app to access your workspace over our OAuth server, we record the client id, the scopes you granted, the workspaces you selected, and the issue/refresh times so you can revoke access later.
    • Optional waitlist email if you submit it on the landing page.

    3. How we use it

    To operate the product, authenticate you, run AI features on your behalf, meter usage, prevent abuse, and improve reliability. We do not sell your personal data.

    4. Service providers

    We rely on a small number of vetted sub-processors to provide authentication, hosting, AI inference, and (when enabled) billing. Your content is shared with them only to the extent needed to deliver the service.

    5. Your content and AI

    Content you place in a workspace is processed by AI providers as needed to fulfill your requests. We do not use your private workspace content to train third-party models.

    6. Retention

    We retain workspace data for as long as your account is active. You can delete workspaces at any time, which removes the associated files and indexes.

    7. Your rights

    You can request access, export, correction, or deletion of your data by contacting us at the email below. We respond within 30 days.

    8. Contact

    Questions: hello@starspace.run