Overview

Delega is open-source task infrastructure for AI agents. We offer both a self-hosted version (where you control all data) and a hosted service at api.delega.dev. This policy covers the hosted service. If you self-host Delega, your data never touches our servers and this policy does not apply.

What We Collect

When you use the hosted Delega service, we collect and store:

• Account information: Email address provided during signup
• Task data: Tasks, projects, labels, priorities, due dates, and any content you create through the API, CLI, MCP server, or dashboard
• Agent metadata: Agent names, slugs, and API keys you create
• Webhook configurations: URLs and secrets for webhook delivery
• Usage data: API request counts for plan enforcement

We do not collect:

• Personal names, addresses, or phone numbers
• Payment card numbers (Stripe handles all payment processing directly)
• Browsing behavior, cookies, or tracking pixels
• Data from your self-hosted Delega instance

How We Use Your Data

Your data is used to:

• Provide the Delega hosted service (storing and retrieving your tasks)
• Enforce plan limits (free tier task caps, API rate limits)
• Deliver webhooks to URLs you configure
• Send transactional emails (account verification, password resets)

We do not sell, rent, or share your data with third parties for marketing purposes. We do not use your task data to train AI models.

Where Your Data Lives

Hosted Delega data is stored on Cloudflare's global network (Cloudflare Workers and D1 database). Data may be replicated across Cloudflare's edge locations for performance. For details on Cloudflare's infrastructure, see Cloudflare's Privacy Policy.

Third-Party Services

The hosted service uses these third-party providers:

• Cloudflare: Infrastructure, hosting, database (Workers, D1, Pages)
• Stripe: Payment processing for paid plans
• Resend: Transactional email delivery

Each provider has their own privacy policy governing their handling of data.

Data Retention

Your data is retained as long as your account is active. If you delete your account, your data (tasks, projects, agents, webhooks) will be permanently removed. We do not maintain backups of deleted account data.

Your Rights

You can:

• Export your data at any time via the API
• Delete individual tasks, projects, or agents via the API or dashboard
• Request full account deletion by contacting us

Security

API keys are hashed before storage. All connections use HTTPS/TLS. Webhook secrets are generated automatically using cryptographically secure random values. That said, no system is perfectly secure. See our Terms of Service for limitations of liability.

Children

Delega is not intended for use by individuals under 13 years of age. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the service after changes constitutes acceptance.

Contact

Questions about this privacy policy? Email [email protected].