Privacy.

Last updated 25 October 2026. ninedot is in open beta; this notice covers what it collects today.

What we collect

Your email address and sign-in sessions. The products you add, and the API keys you connect. Keys are encrypted at rest and only read by our servers to fetch status, cost and revenue figures, which we store so you can see them over time. Agent keys are stored only as a one-way hash. We don't use advertising trackers.

Analytics

We count page views with Vercel Web Analytics, which uses no cookies and doesn't identify you. Pages inside the app are counted as generic routes, so your product names are never sent.

Nine and AI agents

If you connect your own AI model for Nine, its key is encrypted at rest like any other. When you ask Nine a question, the question and the parts of your workspace needed to answer it are sent to the provider you chose (Anthropic, OpenAI or OpenRouter), under their terms. AI agents you connect over MCP can read your workspace with the permissions you grant, and you can revoke them at any time under Agents. We don't see or store your conversations in Claude, ChatGPT or other apps, only the requests an agent makes to ninedot.

Email and public data

Sign-in links are sent by our sign-in service, Supabase. Alerts and the weekly summary are sent through Resend. Uptime checks visit the product URLs you add. YouTube channels you add are read from YouTube's public statistics.

How long we keep it

Uptime checks are kept for 90 days. Everything else is kept while your account exists, and deleted when you ask us to delete it.

Why

To run ninedot for you: show each product's stack, health, cost and revenue, and ping your product URLs for uptime. We don't sell or share your data.

Where it's kept

In our database hosted by Supabase in Sydney, Australia. The site itself is served by Vercel.

Deleting it

Email nick@astrnt.me and we'll delete your account and data within 30 days. Removing a connection in the app deletes its key straight away.