Privacy Policy — Preflight

    Short version: Preflight CLI tools run entirely on your machine. No content, agent outputs, or behavioral data leaves your device. Optional, opt-in telemetry collects only anonymous aggregate usage statistics.
  

1. What Preflight Is

Preflight is a suite of open-source CLI tools for AI agent pre-deployment checks: stepproof (behavioral regression), agent-comply (EU AI Act compliance), and agent-gate (unified CI pipeline). All tools run locally — Preflight has no servers, no cloud backend, and no data pipeline of its own.

2. Data We Collect

Preflight CLI tools collect no data by default. Each tool that includes telemetry requires explicit opt-in before any data is sent.

If you enable telemetry, the following anonymous, aggregate statistics may be sent:

Which command was run (e.g., "stepproof run", "agent-comply check")
Whether the command succeeded or failed (no error content, no agent outputs)
Approximate runtime duration
Pass/fail counts in aggregate (not individual test results or agent outputs)
A random session ID that resets every 24 hours (not linked to you)

We never collect: your agent outputs, scenario files, compliance check results, file paths, IP address, or any personally identifiable information.

You can disable telemetry at any time using each tool's --no-telemetry flag or the tool's telemetry configuration.

3. Landing Page Analytics

The Preflight website uses GoatCounter for privacy-friendly analytics. GoatCounter:

Does not use cookies
Does not collect personal data or IP addresses
Does not track users across sites
Is open source and GDPR-compliant by design

4. Third-Party Services

Preflight tools interface with the following third-party services depending on how you configure them:

Anthropic Claude CLI — stepproof and agent-comply use Claude CLI for behavioral testing and compliance analysis. Your scenario files and agent outputs are processed by Anthropic's API as part of normal Claude CLI operation. Review Anthropic's Privacy Policy. Preflight is not affiliated with Anthropic.
npm Registry — Used only for installation. No ongoing data collection.
GitHub — Source code and GitHub Actions CI. Subject to GitHub's Privacy Statement.

Preflight does not sell or share your data with any third parties.

5. EU AI Act Compliance Data

agent-comply generates compliance reports based on your agent's behavior and configuration. These reports are stored locally — they are never sent to Preflight's systems. You control all compliance artifacts.

6. Your Rights (GDPR)

If you are in the European Union or UK, you have the following rights under GDPR:

Right of access — You can request a copy of any data we hold about you.
Right to erasure — You can request deletion of any data associated with you.
Right to object — You can opt out of telemetry at any time.
Right to portability — Any data we hold about you can be provided in a portable format upon request.

Because Preflight does not collect personal data by default, GDPR obligations are minimal. Contact us at bilko@bglabs.app with any requests and we will respond within 30 days.

7. Data Retention

Aggregate telemetry data (if enabled) is retained for up to 12 months for product improvement. No personal data, agent outputs, or compliance artifacts are stored by Preflight.

8. Children's Privacy

Preflight tools are developer software not directed at children under 13. We do not knowingly collect information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Continued use of Preflight tools after changes constitutes acceptance.

10. Contact

Questions or requests about this Privacy Policy:

bilko@bglabs.app

Preflight is open source: