Privacy

Last updated October 2026. Fetch is in beta; this policy will grow with it.

What we store

• Your account: your name, an email address when you sign in with GitHub, Google or SSO, your passkeys' public keys, hashed recovery codes and hashed access tokens.
• Your organization's data: the workspaces, collections, requests, environments and other items you create, and their change history, so you can sync, restore and see versions.
• Request history: requests you send and their responses, with secret values redacted.
• Usage counters: cloud requests, hosted calls and storage per organization, to enforce the beta limits.
• Security logs: sign-ins, IP addresses and rate-limit events, to keep the service safe.

What we don't

• No advertising, no trackers, no analytics scripts and no third-party fonts on this site.
• Vault variables never leave your device. Your AI provider keys stay on your device; AI calls go from your browser or the Fetch Agent straight to the provider you chose.
• We don't sell or share your data. We don't train models on it.

Where it lives

Fetch runs on our own server, and your data is stored there, not with a cloud storage provider. Secret variables are encrypted at rest with a per-organization key. Traffic reaches the server through Cloudflare's network (a Cloudflare Tunnel).

Your choices

Organization owners can export everything or delete the organization at any time; deleted items stay in the trash for 30 days. You can delete your account by contacting us.