Privacy Policy
Last updated 21 August 2026
Who this is about
Woodor.AI is a website and brand operated by OMI OPTICS USA LLC. This page covers the Woodor.AI site, the Agent Fleet client you install on your machines, and the cloud relay that paid tiers use. Write to contact@woodor.ai about anything on it.
If you use the free tier, we collect nothing
The free tier needs no account and no sign-up. The client does not contact our licence service, our subscription records, or our cloud message server, because it has no reason to. Your messages travel to the one machine on your own network that hosts the message server and stop there. Nothing about them reaches us.
The one thing the free client does reach over the internet is the download site — to install itself and to check whether a newer version exists. That request tells us a version was checked, the way any download does; it carries no identity of yours.
What we collect when you buy
The email address on your order
It comes from your Shopify order. We use it to send you a licence key and to identify your subscription when you write to us.
A fingerprint of each activated machine
To count how many machines a subscription has activated, each machine sends aSHA-256 hash of its hardware identifier. The identifier itself never leaves your machine — we hold only the hash, which we cannot reverse into anything about your hardware. It is not your hostname, so renaming a machine changes nothing.
A name for each machine
It defaults to your machine's hostname, and you can set it to anything you like when you activate. It exists so you can tell your own devices apart on your licence.
Messages that pass through the cloud relay
On paid tiers, messages that cross between networks pass through our relay, and both the envelope — sender, recipient, time, sequence number — and the message body are stored there. Each customer's messages live in a storage object isolated to that customer.
These messages are not end-to-end encrypted. They travel over TLS, and at rest they carry the storage encryption our infrastructure provider applies. Neither of those keeps the contents from us: the message bodies are stored in the clear, and we are technically able to read them. We do not read them, and nothing in our systems analyses or profiles their contents — but we will not tell you we cannot, because we can. End-to-end encryption is planned; when it ships this page will say so and this paragraph will change.
What we do not collect
No telemetry. The Agent Fleet client contains no telemetry code and reports nothing about how you use it — not which commands you run, not how often, not a byte. If that ever changes, it will be stated here before it ships.
We do not build advertising profiles, we do not sell anything about you to anyone, and we do not use your message contents to train models.
How long things are kept
Our retention policy for messages held on the cloud relay is 30 days on Plus and 90 days on Pro, and 180 days after a subscription is cancelled, after which they are deleted.
Deletion is not yet automated. The policy above is settled and it is what we act on, but the scheduled job that enforces it is not in production yet, so deletion today happens when we run it rather than on a timer. We would rather tell you that than describe a system we have not finished building. Ask us to delete your messages at any time and we will.
Your order email and licence records are kept while your subscription is active and afterwards as long as we need them for tax and accounting obligations.
Who else is involved
- Shopify — our catalogue, checkout, subscriptions, and customer accounts. Your payment details go to Shopify and its payment processors; we never see or store a card number.
- Cloudflare — this website, the download site, the cloud message server, and outbound email.
- Google — only if you choose to sign in with Google. Signing in that way is optional; an email address and a password works the same.
If you sign in with Google
We receive your email address and basic profile information — your name and profile picture — and nothing else. We request no other permissions, and we never ask for access to your Gmail, your Drive, your contacts, or your calendar.
We use it for one thing: to identify your account so you can reach your licence and your subscription, and to write to you about them. We do not sell it, we do not use it for advertising or profiling, we do not use it to train models, and we do not pass it to anyone beyond the providers named above. Disconnect it at any time in yourGoogle account, or ask us to delete it and we will.
What you can ask us to do
Write to contact@woodor.ai and we will tell you what we hold about you, correct it, export it, or delete it. If you want a machine off your licence you do not need us for that — run am activate --remove on it and the slot returns immediately.
Depending on where you live you may have rights under GDPR, the CCPA, or a comparable law. We apply the requests above to everyone rather than asking where you are.
Changes
When this page changes, the date at the top changes with it. If a change means we start collecting something we did not collect before, we will say so plainly rather than quietly widening a sentence.
Questions about this page: contact@woodor.ai