What we collect
Draft · version 2026-07
Draft — not yet in effect
This document is under legal review and is published here for transparency only. It does not yet bind you or us. We'll set an effective date once review is complete.
A plain-language map of what Caveman collects on each plan, and what we never collect. It's the ten-second version of the Cloud Privacy Policy.
By plan
| What | Free | Indie | Team | Enterprise | Local wrap |
|---|---|---|---|---|---|
| Usage metadataspans, tokens, cost, latency, status | Yes | Yes | Yes | Yes | Token counts only |
| Payload hashessalted, for dedupe and cache lookups | Yes | Yes | Optional | Optional | Local only |
| Raw request & response payloadsthe prompt and response bytes | Yes | Yes | Default on | Never | Never leaves your machine |
| Used to improve Caveman's modelstraining and evaluation | Yes | Yes | Default on | Never | Never — no payloads exist to use |
| Product analyticsroutes, section reads, engagement & feature usage; cookieless | Yes | Yes | Yes | Never | n/a |
| CLI telemetryanonymous, no content or paths | Opt-in | Opt-in | Opt-in | Opt-in | Opt-in (off by default) |
“Default on” means it starts on and you can turn it off any time in Data governance. On Free and Indie, product data sharing is a condition of the plan — it's part of what keeps them cheap. On Enterprise it is off, contractually.
The local wrap is stricter than every hosted plan: its telemetry is token counts, model names, and savings numbers — never prompt or response bytes, which have no upload path at all. On Free and Indie that telemetry is part of the plan (it is also how the weekly allowance is metered); on Team it has an org-level opt-out; on Enterprise zero-data-retention orgs the endpoint refuses the upload entirely.
One nuance worth being precise about: turning off product data sharing stops your traffic from entering the training corpus and purges what was collected, but compression recovery storage (the encrypted originals that let caveman restore compressed prompts byte-for-byte) is separate — it exists to serve you, follows your retention window (30 days by default), and is never used for training once sharing is off. Zero-data-retention mode disables both.
What we never collect
- The CLI never sends your prompts, completions, code, or file paths — only anonymous command metadata, and only if you opt in.
- The local wrap never sends prompt or response bytes — there is no code path that uploads them. Its telemetry is token counts and savings numbers only.
- The browser extension collects nothing. See its own privacy policy.
- Enterprise traffic is never used for training or product improvement, and product analytics is off for enterprise organizations.
- We never sell your data, and we never share your prompts or responses with third parties for their own purposes.
- Product analytics never includes prompt or response content, or any text you typed.