Privacy Policy

Effective 26 July 2026 · Last updated 26 July 2026

Who we are, and our two roles

Patina is a service of Dome Works LLC, a Nevada limited liability company with its registered office at 732 S 6th St #5620, Las Vegas, NV 89101, USA. This notice covers our website at patina.so and the Patina application.

We handle personal data in two different roles, and the difference matters:

• As a controller — for account, billing, support, and website analytics data. We decide why and how it is processed, and this notice explains that.
• As a processor — for personal data inside your workspace content. If you put a customer's details into a context doc, you decide what happens to it; we process it on your instructions to run the service. Your own privacy notice governs that data, and we act under our agreement with you.

What we collect

Account and identity

Name, email address, profile image, the sign-in method you use, workspace name and role, and session metadata. Sign-in is handled by Clerk; we do not store your password.

Billing

Plan, subscription status, billing contact, and the payment-card metadata Stripe returns to us (card brand and last four digits). Stripe processes the payment — we never receive or store full card numbers.

Your workspace content

Documents, playbooks, context, prompts, uploads, session and run history, connector content you authorise us to pull in, and anything else you or your agents put into Patina. This may contain personal data about third parties, which you control.

Usage and analytics

Pages viewed, features used, events and interactions, approximate location derived from IP address, browser and device type, referring page. Collected through PostHog and Google Analytics. We do not record your screen — session recording is switched off.

Technical logs and diagnostics

IP address, timestamps, request paths, API and MCP call metadata, agent identity and audit-trail records, and error reports. Error reports are sent to Sentry with personally identifying request data switched off.

Communications

Emails and messages you send us, and our replies.

How we use it, and on what basis

The "lawful basis" column applies to people protected by the UK or EU GDPR. If that is not you, read the purposes and skip the column.

We do not make decisions with legal or similarly significant effects about you by automated means alone.

We don't train AI models on your content

Your workspace content is not used to train or fine-tune any AI model — ours or anyone else's. The model providers we send content to are contractually prohibited from using it to train their models.

We do use aggregated, de-identified statistics about how the service is used — counts, timings, error rates — to operate and improve Patina. That never includes your content, and it cannot identify you or your workspace.

How AI processing works

• When you use a feature that generates, retrieves, or extracts, the relevant content is sent to an AI provider — currently Anthropic and OpenAI — which returns a result. Some requests pass through Cloudflare's AI gateway.
• Reasoning traces from agent runs are stored in Cloudflare R2 object storage so you can inspect what an agent did.
• AI clients you connect are different. If you connect Claude, ChatGPT, a coding agent, or any other client through our MCP server or API, workspace content within the scope you grant is sent to that provider and is then handled under their privacy policy, not this one. You choose what to connect and what it can reach.
• Features that generate text are AI systems, and we tell you so where you use them. Output can be inaccurate — see our terms.

Who we share it with

We share personal data with the service providers below, each under a contract that limits them to processing it for us. We do not share it with anyone else except as described in this section.

Connectors you authorise. If you connect a third-party tool such as Slack, we exchange data with it on your instruction. Those providers are not on the list above because the connection is yours to make and to revoke.

We may also disclose personal data where we are legally required to, to enforce our terms, to protect rights and safety, or to a buyer in connection with a merger or sale of the business — in which case we will tell you before your data becomes subject to a different policy.

Cookies and tracking

We use three kinds of cookie and similar storage:

• Essential — sign-in and session cookies set by Clerk, and security cookies. The service cannot work without them.
• Product analytics — PostHog, to understand which features are used. It stores an identifier in cookies and local storage. Session recording is disabled.
• Website analytics — Google Analytics, across our website and app.

Your choice. Analytics cookies are set only after you accept them in the cookie banner shown on your first visit. You can change your mind at any time — reopen cookie settings — and the change takes effect from your next page load.

Third-party tracking across sites. Google Analytics is operated by Google, which may collect information about your online activity over time and across different websites and services, including when you are not using Patina. We do not control that collection. You can opt out with Google's browser add-on, and you can block or delete cookies in your browser settings — essential cookies aside, the service will still work.

Some browsers send a "Do Not Track" or Global Privacy Control signal. We do not currently respond to Do Not Track, because there is no common standard for it.

Selling and sharing

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have never done either.

Nevada residents have a statutory right to tell an operator not to sell their covered information. Even though we do not sell it, you may submit a verified request to [email protected] with the subject "Nevada opt-out", and we will respond within 60 days.

How long we keep it

• Workspace content — while your account is open.
• After you close or we terminate your account — 30 days to export, then deletion from live systems; encrypted backups are purged on our normal cycle, within 90 days.
• Account and billing records — kept as long as tax and accounting law requires, typically six to seven years.
• Technical logs and error reports — typically 30 to 90 days.
• Analytics — per our providers' retention settings, no longer than 14 months.

Security

We encrypt data in transit and at rest, restrict internal access to those who need it, isolate workspaces from one another, keep an audit trail of agent and API activity, and store connector credentials encrypted. No system is perfectly secure, and we do not claim otherwise. If a breach affects your personal data we will notify you and any regulator we are required to notify, without undue delay.

International users

Patina is operated from the United States and all the providers listed above process data there. If you are in the UK, the EEA, or Switzerland, using Patina means your personal data is transferred to the United States, which has not been found to offer equivalent protection in every case.

Where we transfer personal data covered by UK or EU GDPR, we rely on the European Commission's Standard Contractual Clauses together with the UK International Data Transfer Addendum, and on our providers' certifications where they hold them. You can ask us for details of the safeguards that apply.

Your rights

Depending on where you live, you may have the right to:

• ask what personal data we hold about you and get a copy;
• have inaccurate data corrected;
• have data deleted;
• receive your data in a portable format, or have it sent to another provider;
• object to or restrict processing based on legitimate interests;
• withdraw consent at any time, without affecting what we did before you withdrew it;
• opt out of marketing email, using the unsubscribe link or by writing to us;
• not be discriminated against for exercising any of these rights.

To exercise any of them, email [email protected]. We will respond within 30 days (45 days for California requests, extendable once where the law allows). We may need to verify your identity first. You can use an authorised agent where the law provides for one.

If your request concerns content inside a customer's workspace, we will refer you to that customer — they control it, and we act on their instructions.

If you are in the UK or EEA and think we have handled your data badly, you can complain to your supervisory authority — in the UK, the ICO. We would rather you came to us first.

Reviewing and changing your information

You can review and change most of your information yourself: account details and profile in your account settings, workspace content directly in the app, and billing details through the billing portal. For anything you cannot change in the app — or to ask for a full copy or deletion — email [email protected] and we will action it.

Children

Patina is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this notice

We may update this notice. The effective date at the top always shows the current version. If a change materially affects how we handle your personal data, we will tell you by email to your account address, or by a notice in the app, at least 30 days before it takes effect — except where the law requires us to act sooner.

Contact

For anything in this notice, including data requests, email [email protected], or write to Dome Works LLC, 732 S 6th St #5620, Las Vegas, NV 89101, USA.