Privacy Notice

Last updated: October 30, 2026

This notice tells you what personal data ShakoAI, Inc. (“Shako”, “we”, “us”) collects when you use shako.dev, the Shako workspace, the shako CLI and Shako VMs, why we collect it, who receives it, and your choices. Our Terms of Service apply too.

1. The Data That We Collect

  • Account data: your email address, the account name that is in your URLs, and the public SSH keys that you add.
  • Early-access list: your email address and the time that you joined, when you join the list.
  • Service data: the names, sizes and states of your VMs, their times (created, last active, awake time), their shared ports and public links, the names of your sessions, and your agent memory.
  • Your Content: the files, programs and data in your VMs. We host it to provide the Service. We do not look at it, except to keep the Service running and secure, to fix a problem that you ask us to fix, or when the law requires it.
  • Requests to model providers: the requests from your VMs to model providers go through Shako, so that we can add your agent memory to them. We send your provider login to the provider unchanged, and we do not store or log it. Our logs of these requests do not contain the content of the requests.
  • Technical data: IP addresses and request logs on our servers and at Cloudflare. We use them to run the Service, to keep it secure and to limit abuse, for example a limit on early-access signups from one address.
  • Messages: what you send us by email.

2. Cookies

The workspace uses two cookies, and only to sign you in: shako_session keeps you signed in for up to 30 days, and shako_next keeps for up to 1 hour the page to show after you sign in. We do not use cookies for advertising or analytics.

3. How We Use the Data

  • To provide, run and improve the Service, and to support you.
  • To send you sign-in links and emails about your account and early access.
  • To keep the Service and its users secure, and to find and stop abuse.
  • To measure the time that your VMs are awake and asleep, for billing when we start to charge.
  • To obey the law.

We do not sell your personal data. We do not use it for advertising. We do not use Your Content to train AI models.

4. Who Receives the Data

We share personal data only with these service providers, and only as necessary for the Service:

  • Hetzner Online GmbH: the servers in the European Union that run your VMs and our services.
  • Cloudflare, Inc.: the domain names, the network in front of our services, and the hosting of shako.dev and the workspace, including the early-access list.
  • Resend: the delivery of our emails, such as sign-in links and early-access emails.
  • The model providers that you choose: the requests of your agents go to them through Shako.

We can also disclose data when the law requires it, to protect the rights and safety of persons, or as part of a merger, an acquisition or a sale of assets.

5. Where the Data Is

Your VMs and our services run in the European Union. Our service providers can process data in the United States and in other countries where they work.

6. How Long We Keep It

  • Account data, service data and Your Content: while your account is open.
  • When your account closes: we delete your VMs and your account data within 30 days, except data that the law requires us to keep.
  • The early-access list: until you ask us to remove your email address.
  • Logs: only as long as necessary to run and secure the Service.

7. Security

Each VM runs in its own isolated virtual machine, and our services use encrypted connections (HTTPS and SSH). No service is completely secure, so we cannot promise that your data is safe from all attacks.

8. Your Choices and Rights

You can ask us for a copy of your personal data, to correct it, or to delete it. You can copy Your Content out of your VMs at any time over SSH. To make a request, write to fan@shako.dev. Depending on where you live, for example in the European Economic Area, the United Kingdom or California, the law can give you more rights, and we respect them. You can also complain to your data protection authority.

9. Children

The Service is not for persons under 18. If we learn that we have personal data of a child, we delete it.

10. Changes to This Notice

We can change this notice. We put the new date at the top. For a material change, we tell you by email or on shako.dev before it applies.

11. Contact

ShakoAI, Inc., fan@shako.dev