Skip to content
Dobi

Privacy Policy

Last updated November 8, 2026.

LlamaIndex, Inc. ("LlamaIndex", "we", "us") makes Dobi. This policy covers the Dobi app and its API, the Dobi plugin and this site, and says what we collect, how we use it, who we share it with, and the choices you have. TheTerms are the rest of the agreement.

The short version

  • Every task is Synced or Private. A Synced task's content comes to Dobi. A Private task's content stays on your computer.
  • People on the Dobi team may read Synced content to improve Dobi.
  • Dobi's service never sends your content to an AI model. Your agent works with your own AI provider.
  • We don't sell your personal information, and we don't show ads.
  • You can export your data, delete tasks, or delete your account in Settings.

What we collect

Your account

You sign in with Google, which gives us your Google account ID, email address, name and profile picture. We keep the ID, email and name, and don't ask for access to anything else in your Google account. We check which Google Workspace domain you're signing in from, if any, when deciding who can sign up, and don't store it.

Devices you connect

When you connect the plugin, we keep a label such as "Dobi plugin on macOS", the pairing code you approved, and when it happened. Once the device has collected its key, we keep only a fingerprint (hash) of it. Keys last up to 90 days, and you can disconnect a device in Settings at any time.

Records, for every task

For both Synced and Private tasks, the plugin sends records: random IDs, keyed fingerprints, verdicts, times, counts, model names, and token and cost counts. Records don't include task names or text.

Content, for Synced tasks only

A Synced task also sends its content: its name and description, checks and expected answers, example inputs, instructions and versions, run outputs and recorded steps (including tool inputs and outputs), evaluations, reviews and notes, and the feedback and edits you make in the app. Before anything leaves your computer, the plugin removes text shaped like keys, passwords and tokens. This is best-effort and can miss things.

A Private task's content stays on your computer. Dobi never receives it. Hidden model reasoning isn't collected, and the plugin records only the sessions and files you ask it to.

Service and security information

  • Cookies. The app uses only the cookies it needs to work: two that last 10 minutes while you sign in, and a session cookie that lasts up to 14 days and ends after 72 hours without use. We don't use advertising or analytics cookies. This site sets no cookies.
  • IP addresses. The app uses your IP address, in memory, to limit how fast requests can come in. We don't store it in our database or logs. Our hosting provider may record it in its own logs.
  • Logs and operational events. For each API request, the service logs the route, the result, the time it took, any error type, and the plugin's version. It sends the same fields, plus where errors happened in our code and whether scheduled jobs ran, to PostHog so we can see whether Dobi is working. These don't include your account, IP address or content.
  • Email. If you write to us, we receive your message and address.

How we use it

  • To provide Dobi: sign you in, store and show your tasks, and connect your devices.
  • To maintain, develop and improve Dobi. This includes people on the Dobi team reading Synced content to understand how Dobi is used and what to build.
  • To keep Dobi secure, prevent abuse, and fix problems.
  • To answer you when you write to us.
  • To follow the law and enforce our Terms.

We may de-identify or aggregate information so that it no longer identifies you or anyone else. We keep de-identified information in that form, don't try to re-identify it, require anyone we share it with to do the same, and may use and share it for any lawful purpose.

Who we share it with

We don't sell your personal information or share it for advertising. We share it only:

  • With the providers that run Dobi for us:
    • Render hosts the app, the API and this site (United States).
    • Neon runs our database, which holds accounts and records (United States).
    • Cloudflare R2 stores Synced content (United States).
    • Google provides sign-in, and our team's email.
    • PostHog receives the operational events described above (United States).
    • Namecheap runs our domain and forwards email sent to our addresses to our team.
  • When the law requires it, or to protect the rights, safety or security of our users, the public or Dobi.
  • As part of a merger, acquisition or sale of assets, under this policy's protections.
  • When you ask us to.

The plugin's code is on GitHub, whose own privacy statement covers downloading it. Your agent and your AI provider handle your work under your agreement with them, not this policy.

How long we keep it

  • Content you delete leaves the app at once and is removed from storage about 24 hours later.
  • Deleting a task removes its content. Its records stay in your account's history until you delete your account.
  • Deleting your account signs you out everywhere and disconnects every device at once. About 24 hours later, we erase your content, records, devices and account.
  • We keep a log of consent, security and deletion events, and of which invite an account used: account and item IDs, actions and times, never content. We keep it as long as we need to show what happened and to keep deleted data from coming back.
  • Our database keeps a restore history of up to 7 days, so deleted data can remain there for up to 7 days. If we ever restore it, we apply every deletion again.
  • Sessions are deleted after they expire.

Your choices and rights

  • Keep it local. Make a task Private, or set Private as your default in Settings before you connect.
  • Export. Settings, Export saved data, gives you your workspace as a file.
  • Delete. Delete a task, or delete your account, in the app.
  • Correct. Your name and email come from Google and update each time you sign in.

Depending on where you live, including California, you may have the right to know what personal information we hold about you, to get a copy, to correct it, to delete it, and to opt out of its sale. We don't sell it. To use any of these rights, or to have someone act for you, write to privacy@dobi.invalid. We'll confirm it's you, reply within 45 days, and won't treat you differently for asking. If your information is in someone else's Synced task, you can write to us too.

Security

Data is encrypted in transit and at rest. Dobi's servers can read Synced content, because the app shows it to you, so it isn't end-to-end encrypted. Device keys are kept only as fingerprints. No system is perfectly secure; if we learn of a breach that affects your information, we'll tell you as the law requires.

Children

Dobi is for people 18 and older. We don't knowingly collect information from anyone younger.

Where Dobi works

Dobi is for people in the United States, and it stores data in the United States.

Changes to this policy

We'll post any change here. Before a material change takes effect, we'll give notice, for example in the app, and it will apply only to information collected from then on, unless you agree otherwise.

Contact

LlamaIndex, Inc. Write to privacy@dobi.invalid with any question about privacy.