# Privacy policy

> How ncdents, LLC (SixWays) collects, uses, and protects personal data across the SixWays website, products, and services.

Source: https://sixways.ai/privacy/

## Privacy policy

Last updated October 12, 2026

Draft for legal review. This text has not been approved and is not yet in effect.

This policy explains how ncdents, LLC (“SixWays”, “we”, “us”) handles personal data when you visit sixways.ai, use SixWays Cloud, or use SixWays products. The short version: most SixWays components run on your machines or in your own cloud, and the data they handle stays there.

### Who is responsible

ncdents, LLC is the controller for personal data we collect through this website and SixWays Cloud. When we host a SixWays Server tenant for your organization, your organization controls the data in that tenant and we process it on your behalf under our agreement with you.

### What each part of SixWays handles

**The open-source endpoint.** Sessions, events, and policy stay in a local database on your machine. On its own, the endpoint contacts SixWays only to check for and download signed updates. Those requests reveal your IP address and the endpoint version to the service hosting the update feed.

**SixWays Server.** If your organization connects endpoints to a Server, the endpoints send it the telemetry your organization’s policy asks for, such as agent activity, policy decisions, and device status. If your organization hosts its own Server, we never receive that data. If we host a dedicated tenant for you, we store and process it only to provide the service.

**The AI Firewall and Cloud Sandbox.** These run in your own network or cloud account. Prompts, responses, code, and terminal traffic handled by them do not pass through SixWays infrastructure.

**SixWays Cloud.** To manage your account, licenses, and billing, we collect:

- your name, email address, organization, and role;
- sign-in data such as passkey public keys and recovery-code hashes;
- license, subscription, and usage data, such as seat counts and the number of sandboxes running;
- billing details, processed by our payment provider or your cloud marketplace. We do not store card numbers;
- security logs of account activity.

**The mobile approver.** If you pair the SixWays mobile app, we relay approval requests to it. Push notifications are sent through Apple or Google push services and carry no request content.

**This website.** Our web host records standard request logs, such as IP address, browser, and pages requested. If you subscribe to our newsletter, our newsletter provider stores your email address.

### How we use personal data

We use personal data to provide and secure SixWays, to issue licenses and bill for them, to measure usage covered by your subscription, to support you, and to send service messages. We send marketing email only if you subscribe, and every message lets you unsubscribe. We do not sell personal data.

### Service providers

We share personal data with providers that help us run SixWays, such as hosting, payment processing, cloud marketplaces, email delivery, and push notification services, only as needed for them to provide their service to us. We may disclose data when the law requires it.

### Retention

We keep account and billing records while your account is active and for as long as the law requires afterwards. Telemetry in a tenant we host is kept for the retention period your plan or your organization sets, then deleted.

### Security

We protect data with encryption in transit, encryption of secrets at rest, signed releases and licenses, and access controls for our staff. See our [security page](https://sixways.ai/security/) for detail.

### Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict some processing. To make a request, email [privacy@sixways.ai](mailto:privacy@sixways.ai). If your data is in a tenant your organization controls, we will pass your request to your organization.

### International transfers

We may process data in countries other than yours. Where the law requires it, we use appropriate safeguards for those transfers.

### Children

SixWays is not directed at children, and we do not knowingly collect their personal data.

### Changes

We will post changes to this policy on this page and update the date above. If a change is significant, we will notify account holders by email.

### Contact

ncdents, LLC · [privacy@sixways.ai](mailto:privacy@sixways.ai)