Privacy policy
One policy for everything: the Prometheor app for Mac, the connector, your account and this website.
New in version 5.1: the Prometheor app for Mac, permissions for each connected AI, scheduled tasks, Report a problem and handing a chat to another AI (sections 2, 3 and 5).
1Controller
- Controller
- Prometheor, sole proprietorship owned by Kian Peters
- Address
- Johann-Gottlieb-Fichte-Straße 9, 61118 Bad Vilbel, Germany
- Privacy contact
- info@prometheor.com
2What we process and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Account: email, name, sign-in method, Google account ID if you use Google | Create and secure your account | Contract, Art. 6(1)(b) |
| Connections: which AI apps you connected, their sign-in records, your on and off settings, and whether each AI can give tasks or is Read only | Let only your apps give and do tasks | Contract |
| Tasks: the brief, folder name, progress steps, questions and answers, result summary, which AI asked and which did the work, times | Run, show and return your tasks | Contract |
| Schedules: the task, its times and time zone, which AI or Mac it goes to, who set it up, whether it is paused | Start tasks at the times you set | Contract |
| Result files that a task hands back | Deliver results to the AI that asked | Contract |
| Logbook entries: decisions, status changes and results your connected AIs save | Let your AIs continue where another left off | Contract |
| Your Macs: name, which agent apps are installed and signed in, last seen, Mac app version | Send tasks only to Macs you allowed | Contract |
| Wake addresses and keys (keys encrypted) | Tell an AI that a task waits | Contract |
| Payment: Stripe customer and subscription reference, billing country, plan, status, invoices | Bill your plan; keep records required by tax law | Contract; legal obligation, Art. 6(1)(c) |
| Service emails: sign-in links, trial reminder, cancellation confirmation | Run the contract | Contract |
| Content-free request logs: route, status, duration; IP address in the hosting provider's logs | Security, abuse prevention, fixing errors | Legitimate interest, Art. 6(1)(f) |
| Support requests | Answer you | Contract or legitimate interest |
The logbook always runs in the background. Your AIs save short entries about decisions, status changes and verified results without being asked. You can ask your AI not to save something, and you can download or delete your data at any time. Everything else is saved only when you ask.
What stays on your Mac
The Mac app keeps a status file and logs on your Mac (in the folder .prometheor in your home folder). They hold states, app names, task numbers, times and error messages, not the content of your tasks. They also show which account and plan each agent app uses and its version. None of this is sent to us. The Mac app does not upload files from your Mac unless a task hands them back as a result.
Report a problem
Report a problem in the Mac app starts a task in an agent app on your Mac (Claude Code or Codex) that reads the status file and logs and explains what is wrong. That app and its provider process what it reads, as with any task. We see only the task itself, like any other task. The logs reach us only if you send them to us yourself, for example by email; we then use them only to help you.
3AI apps you connect
The AI apps you connect (for example ChatGPT and Codex by OpenAI, Claude and Claude Code by Anthropic, Cursor by Anysphere, Grok Bot by xAI, Muse by Meta, and the open-source app T3 Code) are not our processors. They are separate controllers under their own privacy policies. When you ask an app to hand off a task, that app sends the task to us; when an agent works on it, its provider processes the task, files and result. Agents on your Mac process data locally and with their provider; AIs that work on their provider's servers process it there. See Terms.
Handing a chat to another AI
When you ask to hand one of your Codex or Claude Code chats to another agent app on the same Mac, the Mac app reads that chat on your Mac, removes passwords and keys and gives its newest messages to that app. The chat's text does not pass through us; we only learn which chat it was.
Reading a chat with another AI: When you ask an AI that runs outside your computer (for example ChatGPT) to read one of your Codex or Claude Code chats, the Prometheor app on your Mac reads that chat, removes passwords and keys, and sends its newest messages (about 16,000 tokens) encrypted through Prometheor to that AI. That AI's provider then processes the text under its own terms. Prometheor keeps it with the task result for up to 14 days, like other result files.
4Recipients and transfers
We use the service providers listed under Service providers, bound by data processing agreements. App data is hosted in Frankfurt, Germany. Some providers are US companies; transfers to the US rely on the EU-US Data Privacy Framework and Standard Contractual Clauses. Stripe processes payment details as a separate controller.
5How long we keep data
The longest time each kind of data is kept. Deleting something removes it from the app at once; backups expire on their own schedule and never bring deleted content back. Full chats are never stored.
| Data | Kept at most | How it is deleted |
|---|---|---|
| Account data | Until you delete your account | Active data within 24 hours of deletion |
| Tasks and their results | Until you delete your account | Removed with your account |
| Result files | 14 days | Deleted automatically |
| Logbook entries | Until you delete them or your account | Older versions of an entry after 30 days |
| Your Macs | Until you remove the Mac | Deleted at once; setup codes expire after 10 minutes |
| Schedules | Until you delete the schedule or your account | Deleted at once |
| Wake addresses and keys | Until you remove them or disconnect the AI | Deleted at once |
| Invoices and payment records | Up to 10 years | As required by German tax and commercial law |
| Cancellation and withdrawal confirmations | 3 years | Deleted after the limitation period |
| Content-free request logs | 30 days | Daily deletion |
| Content-free security and audit records | 365 days | Scheduled deletion |
| Encrypted backups | 60 days | Expire automatically; deleted content is not restored |
| Support emails | 12 months after your request is closed | Deleted from the mailbox |
6Service providers
These providers process personal data for us under a data processing agreement. We update this list before a new provider receives your data.
| Provider | What for | Data | Where |
|---|---|---|---|
| Vercel, Inc. | Hosting of the app and connector, request logs | Requests in transit, content-free logs | Frankfurt region; US company, DPF and SCC |
| Supabase, Inc. | Database, sign-in, live status, storage of result files | Account, encrypted task and logbook content, encrypted files | Frankfurt; US company, DPF and SCC |
| Google Cloud | Key management and encrypted backups | Keys and encrypted backup objects | Frankfurt |
| Google sign-in | Continue with Google, only if you choose it | Name, email, Google account ID | Global; DPF and SCC |
| Resend, Inc. | Service emails | Email address, message, delivery data | US; DPF and SCC |
Stripe Payments Europe, Ltd. (Ireland) processes payments as a separate controller. The AI apps you connect are not our subprocessors either; see AI apps you connect above.
7Your controls and rights
In the Mac app you can switch AIs off, pause or delete schedules and remove your Mac. On your account page you can set an AI to Read only, download your data and delete your account. You have the right to access, rectification, erasure, restriction, data portability and objection, and to withdraw consent with effect for the future. Write to info@prometheor.com. You can also complain to a supervisory authority, for example the Hessian Commissioner for Data Protection and Freedom of Information.
8This website
prometheor.com is a static information site. It uses no cookies, tracking or analytics services and creates no accounts. Vercel hosts it and processes technically necessary connection data (such as IP address, time and requested page) to deliver and secure it. Fonts are served from prometheor.com itself; loading the site does not connect to Google Fonts or another font provider. When you download the Mac app, the same connection data is processed. When you first open it, macOS checks its notarization with Apple; that check is between your Mac and Apple. If you set up a Mac with the Terminal command, it loads Node.js from nodejs.org, which sees your IP address like any download, and Update now loads agent app updates from their providers. If you write to us by email, we use your message only to answer you.
10Automated decisions
We do not make decisions with legal or similarly significant effect on you by automated means (Art. 22 GDPR). When Prometheor picks which agent gets a task, that only routes your own task.
11Age, US residents and changes
Prometheor is for people aged 18 and over. We do not sell or share personal information as these terms are defined in US state privacy laws. If this notice changes materially, we tell you in the app or by email before the change applies.