What we collect
Draft · version 2026-07
Draft — not yet in effect
This document is under legal review and is published here for transparency only. It does not yet bind you or us. We'll set an effective date once review is complete.
A plain-language map of what Caveman collects on each plan, and what we never collect. It's the ten-second version of the Cloud Privacy Policy.
By plan
| What | Free | Indie | Team | Enterprise | Self-hosted |
|---|---|---|---|---|---|
| Usage metadataspans, tokens, cost, latency, status | Yes | Yes | Yes | Yes | Local only |
| Payload hashessalted, for dedupe and cache lookups | Yes | Yes | Optional | Optional | Local only |
| Raw request & response payloadsthe prompt and response bytes | Yes | Yes | Default on | Never | Stays local |
| Used to improve Caveman's modelstraining and evaluation | Yes | Yes | Default on | Never | Never |
| Product analyticsdashboard & site usage, cookieless | Yes | Yes | Yes | Never | n/a |
| CLI telemetryanonymous, no content or paths | Opt-in | Opt-in | Opt-in | Opt-in | Opt-in (off by default) |
“Default on” means it starts on and you can turn it off any time in Data governance. On Free and Indie, product data sharing is a condition of the plan — it's part of what keeps them cheap. On Enterprise it is off, contractually.
One nuance worth being precise about: turning off product data sharing stops your traffic from entering the training corpus and purges what was collected, but compression recovery storage (the encrypted originals that let caveman restore compressed prompts byte-for-byte) is separate — it exists to serve you, follows your retention window (30 days by default), and is never used for training once sharing is off. Zero-data-retention mode disables both.
What we never collect
- The CLI never sends your prompts, completions, code, or file paths — only anonymous command metadata, and only if you opt in.
- The browser extension collects nothing. See its own privacy policy.
- Enterprise traffic is never used for training or product improvement, and product analytics is off for enterprise organizations.
- We never sell your data, and we never share your prompts or responses with third parties for their own purposes.
- Product analytics never includes prompt or response content, or any text you typed.