Privacy Policy

Who we are

Woodentable is made by Bandoti Ltd., a company of Nova Scotia, Canada. We're responsible for the personal data described here. For anything about this policy or your data, write to [email protected].

What this policy covers

• The website at woodentable.ai.
• The information the Woodentable program sends to our server, such as requests to download packages and model backends, and usage statistics.
• Email you send to our addresses, such as [email protected].

It doesn't cover services you connect Woodentable to yourself, such as MCP servers, model providers, or a monitoring service you send traces to. Those are between you and them, and their own policies apply.

What we collect

When you visit the website

When you visit the website, we automatically collect the following about each request:

• your IP address;
• the date and time;
• the page or file requested;
• the result and the size of the response;
• the page you came from;
• your browser's user agent.

The site sets no cookies, and its fonts and images are served from our own server, so visiting it sends nothing to anyone else.

Settings you choose on the site, such as a light or dark theme, are remembered by your browser on your device. They are never sent to us.

When the Woodentable program contacts us

The program contacts our server when you install or update a package, when it needs a model backend it doesn't have, and to send usage statistics (below). Each package or backend request includes:

• your operating system and processor architecture;
• the kind and version of package requested;
• your IP address and the standard information of an HTTP request.

These requests are logged like website visits. They carry nothing that identifies your installation, and none of your files, prompts or model content.

When you email us

If you write to us, we receive your email address, your message, and anything you attach.

Usage statistics

Unless you turn them off, the program sends us counts of how it is used, so that we can decide what to improve. They don't name you. The licence agreement says so. Once a day the program sends a report of the previous day's use, from a run long enough to send it, and only after you have accepted the agreement, whether at a terminal or automatically, such as when starting a container. A report holds:

• The installation: the program's version, operating system and processor architecture; the date you first ran the program; and a random number chosen then and kept on your machine until you replace it. The number lets us tell one installation from another, so that we can see how many are in use and how long people keep using the program.
• What was used: how often each of the program's commands, options and features was used, described only in words from a fixed list of our own, such as the mode a run was in or the kind of model backend.
• How much and how well: numbers such as how many sessions, tool calls and scripts there were, how long they took, and how many failed, sorted into broad kinds.

A report never holds arguments, file or folder names, file contents, prompts, model output, error messages, addresses, or the names of your own tools, servers, models or profiles. Everything in it is either a word from our list or a number, and the server refuses a report that holds anything else. If we ever collect something these categories don't describe, we will update this page before the program sends it.

You can see exactly what the next report holds, and turn statistics off at any time, including through the common do-not-track setting. Turning them off deletes the counts waiting to be sent. The usage statistics guide shows how. Programs you build yourself send nothing.

A report holds no IP address, and our server stores none with it, though like any request its arrival is in our request logs for 30 days. Each report also carries a random identifier, kept for about a week, only so that a report sent twice is counted once. The server adds the report to running totals, which hold the month you first ran the program but not your number, and keeps the report itself, with your number and the date, for 13 months before deleting it.

Accounts

Woodentable has no accounts. If we introduce them, we will update this policy before they're available.

How we use this information

We use these records to deliver the website and downloads, to keep the service secure and working, to investigate errors and abuse, and to measure the service, including by usage statistics, so that we can improve it. We don't use them for marketing, profiling, or any automated decision about you. If you email us, we use your message only to answer you and follow up. Where the GDPR applies to you, our legal basis for all of this is legitimate interests (GDPR Article 6(1)(f)): running and improving a secure, working service, and answering the people who write to us.

How we measure the service

We measure how the website and downloads are used, and how well they perform, so that we can improve them. We do it with tools we run ourselves, not third-party analytics or advertising services.

Records that include your IP address, whether request logs or performance traces, are deleted after 30 days. From them we keep counts and measurements, such as page views, downloads and response times by day, page, version and platform. Those hold no IP address or anything else that could identify you, so we keep them without a time limit.

We don't use cookies or scripts to track you, follow you across other sites, or build a profile of you.

How long we keep it

Request logs and performance traces are deleted after 30 days. Where they are needed to investigate a specific security incident, we may keep the relevant entries until that investigation ends. Usage statistics reports are kept as received for 13 months. Counts and measurements that hold neither your number nor anything else that could identify you, including the totals made from those reports, are kept without a time limit. Email you send us is kept for as long as the conversation needs, and for up to two years after it ends.

Who processes it for us

Our server runs at OVHcloud's data centre in Beauharnois, Quebec, Canada. Hébergement OVH Inc. (OVHcloud) hosts it under contract and has no right to use the data for its own purposes. Our email is hosted by Fastmail Pty Ltd, an Australian company, under the same kind of contract, on its servers in the United States. We don't sell your data, and we don't share it with anyone else unless the law requires us to.

International transfers

We store and process the website's and the program's data only in Canada. If you're in the European Union or the United Kingdom, sending it here counts as an international transfer. Both have formally recognised Canadian privacy law as protecting personal data adequately, so it keeps the same level of protection when it reaches us.

Email is the exception. Fastmail stores it in the United States, where it is subject to US law, including access by US courts and authorities. Where the GDPR applies, Fastmail protects the transfer with the European Commission's standard contractual clauses. Fastmail's privacy policy describes where else it may handle email and how it protects it.

Your rights

Under Canadian privacy law (PIPEDA), and the GDPR where it applies to you, you may ask what personal data we hold about you and for a copy, have it corrected or deleted, and withdraw consent or object to how we use it.

Write to [email protected]. We answer within 30 days. If you've emailed us before, writing from the same address lets us find your messages.

Request logs aren't tied to names or accounts, and an IP address can be shared by many people, at home, at work, or through an internet provider. So we usually can't confirm which entries are yours. If you ask us to delete the records for an IP address and time, we will, since deleting them can't harm anyone. We won't send copies of log entries, because we can't confirm they belong to you rather than someone else on the same address. Either way, they're deleted after 30 days.

The program's usage reports are tied to a random number and not to your name, so we can find yours only if you tell us the number. The program shows it to you, as the usage statistics guide explains. Write to us with it, and we will delete every report that carries it. The running totals made from reports no longer hold the number and can't be separated out. Replacing the number starts a new one and deletes the counts waiting on your machine, but reports already sent keep the old number until they are deleted.

If you're not satisfied with our answer, you may complain to the Office of the Privacy Commissioner of Canada or, if you're in the EU or UK, to the data protection authority where you live or work.

Security

Connections to our server are encrypted (HTTPS), and access to the server and its logs is limited to the people who run it.

Changes to this policy

When this policy changes, we update the date at the top. If a change affects what we collect, we describe it here before it takes effect.