Privacy — MyAgentHubs

AgentLoom

desktop app · open source (AGPL-3.0) · nothing of ours in between

API keys

Stored in your operating system's keychain, on your machine.

Conversations

The conversation database stays on your own disk. Message content included in a request to the model is sent to the model provider you chose.

Your code

Agents work directly in your own repositories, in place. AgentLoom's own bookkeeping never touches your working tree.

Our servers

AgentLoom runs no server on the internet. The only listeners it starts are loopback-only helpers on your own machine.

What leaves your device

Requests to the model provider you chose — and, if you turn on web search, your search queries go to the search backend you configured (DuckDuckGo, or Brave/Exa with your own key). Nothing routes through us.

ProtoLens

web service · GitHub is the access boundary

Repository access

Controlled entirely by your own GitHub App installation. You choose which repositories ProtoLens can see, and you can revoke it in GitHub at any time.

Prototype files

Fetched by repository, ref and path — ProtoLens does not clone your repositories or run arbitrary code from them, does not install your dependencies, and does not run your application backends.

Review comments

Stored as Markdown-oriented review data associated with the prototype being reviewed, and exportable as Markdown at any time.

Rendering

HTML review rendering is sandboxed. JavaScript execution and form submission are intentionally constrained.

Review links

A review URL is the sharing boundary. Private prototype files are not republished as open public assets outside that model.

Loomnote

runs in your browser · notes live in your own GitHub repo or S3 bucket

Your notes

Plain Markdown files — one per note — in the GitHub repository you authorized, or in the S3-compatible bucket you configure. We run no database and never store your note bodies.

Working copy

Local first: the working copy lives on your device and works offline. The durable copy is in your repository, under your name, and one git clone takes everything with you.

Reading with AI

The MCP server is local and read-only. Your own AI client reads your notes on your own machine; note bodies do not reach us.

What still passes through us

The front-end JavaScript is served by us. Whatever we ship, your browser runs — this is not a zero-trust setup.
GitHub note reads and writes go straight from your browser to api.github.com. Only the OAuth token exchange passes through an edge Worker whose response is set to no-store; the application does not persist or actively log the token.
S3-compatible storage is written straight from your browser to the bucket you configure.
Your browser cache holds plaintext — on your own device.

This website

Hosted on Cloudflare Pages. Cloudflare processes the usual request metadata (IP address, user agent) to serve and protect the site.
Cloudflare also injects one invisible link into every page, used to spot automated crawlers. It is a plain link — not a script, not a cookie — and it collects nothing from you. We did not put it there, but it is on our pages, so we would rather name it than let you find it in the source.
We run no analytics scripts, no advertising tags and no third-party trackers on these pages.
The site sets no cookies of its own.
Downloads served from /dl/ are counted in a database of our own. We record the time, the requested path, product, version and file name, a two-letter country code, a coarse client category (such as macOS/Chrome), the outcome and the file size — kept for 30 days. We do not record your IP address or your full User-Agent.

Questions, or a request about your data

Write to panda@myagenthubs.com. For AgentLoom and Loomnote, most of "your data" is already in your own keychain, disk or repository — you can inspect or delete it without asking us. For ProtoLens, revoking the GitHub App installation cuts off access immediately.