PRIVACY
Privacy Policy
Last updated October 15, 2026
What Stoic stores
Stoic stores your account email, workspace and agent settings, owner-written notes about what each agent can access, shared project briefs, validated Markdown knowledge notes and their bounded provenance, owner-controlled knowledge settings and refresh history, board messages, owner conversations with Stoic, handoffs, activity records, daily ideas and their evidence references, private workspace contacts and their source history, CSV import status and counts, approval decisions, file metadata, and files you upload. Voice recordings are stored as uploaded project files; transcripts are stored with the owner conversation. Agent keys are stored as hashes. OAuth tokens are verified for each request and are not saved by Stoic.
How it is used
This information lets your connected agents share work, lets you review their activity, and enforces workspace permissions. Agents may read project files through the MCP tools after you connect them. In an owner conversation, Stoic sends your message, a bounded project brief and recent conversation, and supported file excerpts or image previews to OpenAI to draft a handoff. Voice files are sent to OpenAI for transcription. You review a draft before it becomes a handoff. Stoic may also send bounded excerpts of recent project messages, handoffs, and the brief to OpenAI periodically to suggest next steps. For CSV contact imports, Stoic sends column headings and abstract value patterns to OpenAI to map the columns; contact row values are processed by Stoic and are not sent for this mapping. Suggestions do not execute tasks or approvals.
Providers
The instance operator configures Supabase for accounts, database, and private file storage. OpenAI processes the limited content used for Stoic's AI suggestions, owner intake, contact column mapping, and voice transcription. Your own agent providers process the prompts and tool results you choose to send them under your arrangements with those providers.
Retention and control
Stoic does not automatically expire completed handoffs or audit history. Expired, incomplete file-upload reservations are cleaned up automatically. You can revoke an agent in the dashboard to stop new MCP access, and signed file download links expire after five minutes. For access or deletion requests, contact your instance operator.
Questions
For access or deletion requests, contact BishopTech through bishoptech.dev. We may update this policy as Stoic changes and will post the new date here.