Privacy

Last updated: November 8, 2026

This Privacy Policy explains how Alphabyte LLC, doing business as Troop ("Troop," "we," "us," or "our"), collects, uses, and protects information when you use the Troop desktop application, the optional Troop Relay and Troop Cloud services, and the website at troop-web.vercel.app (collectively, the "Service"). Troop is a desktop application for Mac and Linux that runs AI helpers ("Bots") on your computer. Here is what we do and don't collect.

1. Who we are

The Service is operated by Alphabyte LLC, doing business as Troop. Questions: suvaghela23@gmail.com.

2. What we collect

• Waitlist email. If you join the waitlist, we keep your email so we can invite you and send service-related updates. We also keep an optional source and cohort tag from known campaign links.
• Sign-in identity. When you sign in to the app with Google or GitHub, our sign-in service (Supabase) receives your name, email and account ID from that provider, so we can check that you're invited.
• Billing. If you buy a paid plan, our payment processor collects your payment details. We receive your plan, payment status, billing country and the last four digits of your card, never your full card number.
• Relay and Cloud data. Only if you turn on Troop Relay or Troop Cloud, as described in sections 4 and 5.
• Usage and diagnostics. Like most websites, our website and backend may process standard technical data such as IP address, browser type, and pages visited, to operate and secure the Service.

With your permission, we collect basic milestones such as joining the waitlist, receiving an invite, signing in, accepting a result, pairing Relay, and starting checkout. Each event has a random ID, day, app version when available, pseudonymous person ID and cohort. We use these to improve onboarding. We do not collect prompts, code, repository paths, tokens or message content. We use no tracking cookies or fingerprinting. Raw events are kept for 90 days. This is optional and does not affect access. Email us to withdraw consent or delete these events.

3. What stays on your computer

By default, your Bots, chats, folders and settings are stored on your computer. They aren't uploaded to Troop's servers. Unless you use Troop Cloud, we do not receive the contents of your projects, your Bot conversations, or the files Bots read or change. Your AI provider sign-ins and connector secrets stay in your Mac's Keychain or, on Linux, your system keyring (Secret Service), and are never sent to Troop Relay. On Linux, if no system keyring is available, your Troop sign-in session is kept in a private file that only your user can read.

4. Troop Relay (optional)

Relay lets you chat with your Bots and approve their requests from your phone or another device while your computer does the work. When you pair a device, your computer and that device create encryption keys that only they hold. Messages, approvals and attachments are end-to-end encrypted before they leave your device, so Troop's servers pass them along but cannot read them.

• What our servers keep: the encrypted messages until they are delivered (at most 30 days), your paired devices' names and public keys, push-notification tokens, and delivery metadata such as timestamps and message sizes.
• Notifications: push notifications are delivered by Apple, Google or your browser vendor. They contain only a short alert such as "A Bot needs your approval," not your message contents.
• Unpairing: you can unpair a device from the app at any time. We then delete its keys and any messages waiting for it.

5. Troop Cloud (optional)

Cloud runs your Bots on a private cloud computer that Troop sets up for you, so they keep working when your computer is off. Unlike Relay, a cloud computer must be able to read your work in order to run it, so it is not end-to-end encrypted.

• What is stored there: the Bots, chats, settings, files and repositories you move or connect to Cloud, the results Bots produce, and the AI provider and connector sign-ins you set up on that cloud computer.
• Your AI sign-ins: you sign in to each AI provider yourself, using that provider's own login. The resulting credentials are stored encrypted on your cloud computer so your Bots can keep working. Troop does not use them for anything else, share them, or resell AI access. We only offer providers whose terms allow this kind of use.
• Who can access it: each cloud computer is isolated to one account. Troop staff do not look at its contents except when you ask us to for support, when needed to stop abuse or a security threat, or when required by law.
• Encryption: data is encrypted in transit (TLS) and at rest on our hosting provider's storage.

6. AI providers

Bots run through the AI providers you choose, such as Claude, ChatGPT, Codex, Cursor, Pi Agent or Hermes Agent, whether on your computer or on Troop Cloud. Your prompts and the files a Bot needs are sent to those providers, under their own terms and privacy policies. Troop never asks for your AI passwords and doesn't resell AI.

Dictation. When you dictate on your Mac, Troop first turns your speech into text with your own ChatGPT/Codex sign-in if you have one. Otherwise, and always on your phone, Troop sends the recording to OpenAI through Troop's servers to turn it into text. Troop doesn't keep the recording or the text. On a Mac, Apple's speech recognition is the last fallback.

7. Service providers

We share the data described above only with vendors that process it on our behalf: Supabase, Inc. (authentication, database, and Relay message delivery), OpenAI (turning dictated speech into text), our cloud-hosting providers (this website and Troop Cloud computers), our payment processor, push-notification services (Apple, Google, and browser vendors), and our email provider. These providers may only use the data to operate the Service for us.

8. How we use information

We use the information we collect to run the waitlist and invite process, authenticate your sign-in, deliver Relay messages, run Troop Cloud, bill paid plans, operate and secure the Service, respond to your messages, and comply with law. We do not use your projects, chats or files to train AI models. We do not sell your personal information, and we do not use it for cross-context behavioral advertising.

9. Cookies

The website uses only the cookies needed to keep you signed in and to protect the Service (for example, session cookies). We do not use advertising or tracking cookies.

10. Data retention and deletion

• We keep waitlist emails until you ask us to remove them or until we retire the waitlist.
• We keep sign-in and billing records while your account is active, and billing records afterward as long as tax and accounting law requires.
• Relay deletes each encrypted message once delivered, and at most after 30 days.
• When a Cloud plan ends, you have 30 days to export your data. We then delete your cloud computer, and its backups are deleted within a further 30 days.
• Data on your computer is deleted when you delete the app or its data.

Email us and we'll delete your account data sooner.

11. Your rights

Depending on where you live, you may have rights to access, correct, or delete the personal information we hold about you, and to receive a copy of it. Email us at suvaghela23@gmail.com to make a request. We will not discriminate against you for exercising your privacy rights. We do not knowingly sell or share personal information as defined by the California Consumer Privacy Act.

12. Children

The Service is intended for adults 18 and older and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact us and we will delete it.

13. Security

We use encryption in transit (TLS), end-to-end encryption for Relay, encryption at rest for Troop Cloud, passwordless sign-in through Google or GitHub, and access controls on our backend. No system is completely secure; you are responsible for safeguarding the accounts you use to sign in and the devices you pair. If we learn of a breach affecting your personal information, we will notify you as the law requires.

14. Changes and contact

We may update this Privacy Policy as the Service changes; the website will show the current version, and we will email you about material changes where we have your address. Questions: suvaghela23@gmail.com. Alphabyte LLC, doing business as Troop.