stuff

Privacy policy

Stuff is a shared home for files, knowledge, and collaboration with people and their agents. This policy covers stuff.ac and the Stuff mobile app.

Information we collect

We store your email, name, account identifier, sign-in sessions, and the content you choose to add: files, versions, descriptions, metadata, comments, spaces, memberships, and sharing settings. We also store agent connection permissions, security records, reports, and account-deletion requests. Hosting and authentication services process operational information such as IP addresses, request times, device/browser information, and errors to deliver and protect the service.

How we use it

We use this information to sign you in, store and display your stuff, support collaboration, run authorized agent requests, prevent abuse, and respond to support or deletion requests. The mobile app has no advertising or third-party analytics SDK. Stuff does not sell your personal information or use your files to train its own AI models.

Who receives it

Content is available to people you grant access to. Public spaces and files can be viewed by anyone; people may copy or download them. An agent you connect can access content within the permissions you grant. That agent provider handles information under its own policies.

Our service providers include Supabase for authentication and databases, Cloudflare for file storage, Railway for hosting and processing, and Resend for email. They process information needed to provide those services. We may disclose information when legally required or necessary to address abuse or protect users.

Storage and retention

Data travels over HTTPS. Stored files and account data use our providers’ storage protections. Files retain prior versions until their data is deleted; replacing a file does not erase its history. Trashed items are normally eligible for permanent cleanup after 30 days. Operational records and backup copies may remain for security, legal obligations, and backup rotation. Deleted backups are not used as active product data.

Your choices

You can change sharing, revoke agent connections, remove content, sign out, and request account and associated-data deletion. Deletion requests are manually reviewed to verify identity and resolve shared-space ownership. Contact us to request access, correction, or deletion of personal information. Public copies made by others are outside our control.

Age and changes

This beta is intended for adults 18 and older. Do not create an account if you are under 18. We will update this page when our practices change and provide additional notice when required.