TL;DR: Your code stays on your machine. We don't collect your source code, conversations, or Claude API interactions. Optional cloud sync only stores workspace metadata.
This Privacy Policy describes how Dark Research, LLC ("Dark Research," "we," "us," or "our") collects, uses, and shares information when you use Pentagon (the "Software" or "Service"). We are committed to protecting your privacy and being transparent about our data practices.
1. Information We Collect
1.1 Information Stored Locally (We Do Not Collect)
Pentagon is designed with privacy as a core principle. The following data is stored exclusively on your local device and is never transmitted to Dark Research servers:
- Source Code: Any code files you work with in Pentagon
- Conversation History: All messages between you and Claude
- Claude API Communications: API requests go directly from your machine to Anthropic
- File Contents: Any files read or written during Claude Code sessions
- Working Directories: Paths and file structures of your projects
1.2 Information Collected with Cloud Sync (Optional)
If you choose to enable cloud sync by signing in with GitHub, we collect and store:
- GitHub Account Information: Username, email address, and avatar URL
- Instance Metadata: Instance names, creation dates, and status
- City Statistics: Building counts, experience points, and visualization data
- Workspace Settings: Layout preferences and configuration options
We explicitly do not collect: Source code, conversation content, file contents, or any data that could reveal what you're working on.
1.3 Technical Information (Minimal)
When you visit our website or download Pentagon, we may collect:
- IP address (anonymized for analytics)
- Device type and operating system
- Browser type and version
- Download statistics (which version, which architecture)
2. How We Use Information
We use the information we collect to:
- Provide Cloud Sync: Sync your instance metadata across devices
- Authenticate Users: Verify your identity via GitHub OAuth
- Improve Pentagon: Understand usage patterns to improve the Software (aggregated, anonymized data only)
- Communicate: Send important updates about Pentagon (if you opt in)
- Prevent Abuse: Detect and prevent fraudulent or malicious activity
3. How Claude API Works
It's important to understand how Pentagon interacts with Claude:
- Pentagon launches the
claudeCLI as a local process on your machine - API requests go directly from your computer to Anthropic's servers
- Dark Research never sees, processes, or stores your Claude conversations
- Your Anthropic API key or Claude Max subscription is used locally
- Anthropic's privacy policy governs how they handle your API interactions
4. Information Sharing and Disclosure
We do not sell your personal information. We do not share your data for targeted advertising. We may share information only in the following circumstances:
4.1 Service Providers
We use the following third-party services to operate Pentagon:
- Supabase: Database and authentication infrastructure for cloud sync
- GitHub: OAuth authentication provider
- Vercel/Netlify: Website hosting
These providers process data only on our behalf and are contractually obligated to protect your information.
4.2 Legal Requirements
We may disclose information if required by law, regulation, or legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
4.3 Business Transfers
If Dark Research is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
5. Data Retention
- Local Data: Stored indefinitely on your device until you delete it
- Cloud Sync Data: Retained while your account is active; deleted within 30 days of account deletion
- Analytics Data: Aggregated and anonymized; retained for up to 2 years
6. Your Rights and Choices
6.1 Access and Portability
You can access your synced data at any time through Pentagon. You may request an export of your data by contacting us.
6.2 Correction
You can update your account information through the Pentagon settings or by contacting us.
6.3 Deletion
You can delete your account and all associated cloud sync data by contacting us at privacy@darkresearch.ai. Local data can be deleted by removing Pentagon and its associated files from your device.
6.4 Opt-Out
Cloud sync is entirely optional. You can use Pentagon without signing in, and all features (except cross-device sync) will work locally without any data leaving your machine.
7. Security
We implement appropriate technical and organizational measures to protect your information:
- Data encryption in transit (TLS/HTTPS)
- Data encryption at rest in our databases
- Regular security audits and updates
- Access controls and authentication for all systems
- Local-first architecture minimizes data exposure
However, no method of transmission or storage is 100% secure. If you believe your account has been compromised, please contact us immediately.
8. Children's Privacy
Pentagon is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
9. International Data Transfers
If you are located outside the United States, please be aware that information we collect may be transferred to and processed in the United States. By using Pentagon with cloud sync enabled, you consent to such transfer and processing.
10. California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to know whether personal information is sold or disclosed
- Right to say no to the sale of personal information (we do not sell)
- Right to access your personal information
- Right to equal service and price
To exercise these rights, contact us at privacy@darkresearch.ai.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Dark Research, LLC
Email: privacy@darkresearch.ai
Summary of Data Practices
| Data Type | Collected? | Where Stored |
|---|---|---|
| Source code | No | Your device only |
| Conversations | No | Your device only |
| API requests | No | Direct to Anthropic |
| Instance metadata | Optional | Cloud (if sync enabled) |
| City stats | Optional | Cloud (if sync enabled) |
| GitHub profile | Optional | Cloud (if sync enabled) |