Privacy policy

Updated October 15, 2026

Docked is operated by BOTBUILDS LLC. In this policy, “Docked,” “we,” and “us” refer to BOTBUILDS LLC.

Information we handle

Account information includes your name, email address, password hash, workspace membership, and sign-in information. We also handle OAuth authorizations and tokens that let an agent connect to a workspace.

Session information can include the task and steps, messages, website addresses, observed page text and structure, action requests and results, and available step screenshots. Screenshots can contain visible private information. Masking reduces exposure of certain fields but is not a guarantee that every sensitive detail is removed.

Billing information includes your subscription, seat quantity, billing contact, invoices, and limited payment-method details such as card brand and last four digits. Stripe handles payment-card collection and processing.

Why we use it

We use this information to operate accounts and workspaces, connect authorized agents and browsers, maintain session records, process subscriptions, prevent abuse, diagnose problems, and respond to support or legal requests. Login cookies keep you signed in.

Docked does not sell personal information, run advertising profiles, or use session content to train its own models.

Chrome Web Store Limited Use

Docked’s use and transfer of information received through its Chrome extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. We use extension data only to provide and improve the disclosed browser delegation features, including their operation and security.

We transfer this data only as needed for those features, to comply with law, to prevent fraud or abuse, or in a business transfer with your explicit prior consent. We do not use or transfer it for advertising, data brokerage, or creditworthiness decisions. Human access is limited to your explicit consent for specific data, necessary security or legal purposes, or aggregated and anonymized internal operations. This policy statement does not indicate Chrome Web Store approval or certification.

Who receives information

Workspace users with access to a session can read its record. Your chosen agent provider receives the page observations and other information passed through that agent’s connection, under that provider’s own terms and privacy practices. A browser participant can claim a private copy of their session record.

If an authorized user creates a public sharing link, anyone with the link can read the included record. Screenshot sharing is an explicit option. Revoking the link removes future access through it.

Service providers help us operate Docked: Vercel provides hosting and private object storage; Upstash provides Redis storage when configured; Stripe processes payments; Resend, when configured, delivers account verification and recovery emails; and OpenAI can process the task text when you use optional plan generation. That planning feature does not need your browser credentials. We may also disclose information when legally required or necessary to protect the service and its users.

Retention and deletion

We retain information while needed to provide the service, preserve requested records, maintain security, handle billing, and meet legal obligations. Records and screenshots can remain stored long term; there is no automatic deletion schedule. Messages and events may retain only their latest 200 entries. Actions are capped per session; new actions are rejected at the limit rather than silently replacing older actions.

Moving a session to Trash is recoverable removal, not physical erasure. Records and evidence may remain stored. There is not currently a self-service permanent-erasure workflow. Contact us to request deletion or other account-data assistance; these requests are reviewed and processed manually, subject to legitimate retention obligations.

Your choices

You can review access before starting, pause or end a browser session, revoke agent authorization, disable a public sharing link, update your profile, and request account-data help. Avoid placing unrelated private information in the connected tab. Ending access does not automatically erase the saved record.

Depending on your location, you may have rights to access, correct, delete, or obtain a copy of personal information, or object to certain processing. Contact us to make a request; we may need to verify your identity.

Security and international processing

Information may be processed where Docked and its providers operate. We use access controls and other safeguards described on our security page. No online service can guarantee absolute security.

Contact and changes

Contact Docked at team@docked.ai with privacy questions or requests. We may update this policy as the service changes and will update the date on this page.