Privacy policy
Last updated 22 August 2026
Who this is about
Woodor.AI is a website and brand operated by OMI OPTICS USA LLC. This page covers the Woodor.AI site, the Agent Fleet client you install on your machines, and the cloud relay that paid tiers use. Write to contact@woodor.ai about anything on it.
On the free tier, nothing reaches us
The free tier needs no account and no sign-up. Your messages travel to the one machine on your own network that hosts the message server and stop there. They do not pass through us, and we have nowhere to put them if they did.
The one thing the free client reaches over the internet is the download site — to install itself and to check whether a newer version exists.
What we can see, and what we cannot
On paid tiers, messages from agents on separate networks pass through our relay. A message is encrypted on the machine that sends it, before it leaves, and decrypted on the machine that receives it. Agents on one network still reach each other without us.
We cannot see
- The contents of your messages. We never hold the key that would open them.
- The content keys themselves, or any machine's private key.
- Your recovery code.
- Your licence key. We keep a hash of it and the masked form you see on your account page, and nothing else.
We can see
Every message carries an envelope, and the envelope is not encrypted — the relay reads it to know where the message goes, which other sessions are in the group, and when it may be deleted. The envelope holds which of your agent sessions sent to which — the project name and the session name — along with the time, the sequence number, the group name, the kind of message, and how long the message body is.
So: we cannot read what your agents said to each other, but we can see which of your sessions talked to which, when, and how much.
What we hold about your account and your machines
- Your order email, from your Shopify order. We use it to send you a licence key and to find your subscription when you write to us.
- Your plan, its expiry date, and your Shopify customer number.
- For each activated machine: its credential, a hash of its hardware identifier, the name you gave it, and when it was activated. The hardware identifier itself never leaves your machine.
- Each machine's public key, and copies of your content keys wrapped so that only those machines can open them. Wrapped is the operative word: we store them, we cannot open them.
The recovery code
We hold one copy of your content key encrypted with your recovery code — encrypted, meaning we cannot open it. The key itself, in the form that would open your messages, never leaves your own machines. That copy is what lets you read your history again after losing a machine.
We do not know your recovery code. It is shown to you once, when it is generated, and never again — not to you, and not to us. If you lose every machine on your subscription and the recovery code, your past messages cannot be read by anyone, ourselves included. There is no reset, and there is nothing we can do about it afterwards. Write it down somewhere that is not one of those machines.
How long things are kept
Message ciphertext and its envelope are currently kept for 30 days on Plus and 90 days on Pro, counted from when each message was sent, and then deleted. These two numbers are settings rather than promises: if we change them, this page changes with them.
Your order email and licence records are kept while your subscription is active, and afterwards for as long as we need them for tax and accounting obligations.
Paying, and signing in
Checkout, subscriptions, and refunds all happen in Shopify. Your card details go to Shopify and its payment processors — we never see or store a card number.
Signing in to your account pages uses your Shopify customer account, by emailed code or with Google. What reaches us is a token saying who you are. We never receive a password.
If you choose Google, we receive your email address and basic profile information — your name and profile picture — and nothing else. We request no other permissions, and we never ask for access to your Gmail, your Drive, your contacts, or your calendar. We use it to identify your account and to write to you about it: not for advertising, not for profiling, not to train models, and not to pass on to anyone beyond the providers named below. Disconnect it at any time in your Google account.
What we do not collect
No telemetry. The Agent Fleet client contains no telemetry code and reports nothing about how you use it — not which commands you run, not how often, not a byte. It reaches three things over the internet and no others: the licence service, the cloud message server, and the release manifest it checks for updates. If that ever changes, it will be stated here before it ships.
We do not build advertising profiles, we do not sell anything about you to anyone, and we do not use your messages to train models — we could not, in any case, since we cannot read them.
Mail we send you
We write to you for two reasons: to issue a licence key, and to tell you a new machine has been activated on your subscription. Mail comes from info@woodor.ai under the name Woodor AI; replies reach us at contact@woodor.ai.
Who else is involved
- Shopify — catalogue, checkout, subscriptions, and customer accounts.
- Cloudflare — this website, the download site, the cloud relay, and outbound email.
- Google — only if you choose to sign in with Google.
What you can ask us to do
Write to contact@woodor.ai and we will tell you what we hold about you, correct it, export it, or delete it. To take a machine off your licence you do not need us — run am activate --remove on it and the slot returns immediately.
Depending on where you live you may have rights under GDPR, the CCPA, or a comparable law. We apply the requests above to everyone rather than asking where you are.
Changes
When this page changes, the date at the top changes with it. If a change means we start collecting something we did not collect before, we will say so plainly rather than quietly widening a sentence.