Trust
Last updated 16 September 2026
The questions a developer asks before pasting a repository path into a new tool, answered in the order they get asked. This page describes what the software does today; the privacy page says what we keep and for how long, and the changelog says when either changes.
What runs on your machine
Everything that touches your code. The Code tab's shells and coding agents are real processes on your computer, over the folders you opened, signed in to the plans you already pay for. Your agents run there too, each in its own Claude Code or Codex. The board, every pane's saved screen, and a worktree's files live under your Windows profile and nowhere else.
What Snovi's server holds
Your account and workspace. The agents you described: their names, roles, instructions, tools, memory and skills. Their runs and their words: what an agent said, what it asked for, what it queued for a person. Approvals, messages between the people in a workspace, and, if you use them, leads, clients, projects and tasks. That is the dashboard.
Never your repositories, your files, your terminal screens, or the contents of a coding agent's conversation on the Code tab. An agent's tools reach the server over one channel, the registry, and the registry sees the tool calls an agent makes, not your disk.
How the app signs in
The Windows app signs in as you, then mints a key of its own for the agents' channel. That key expires after ninety days and can be revoked at any time under Settings; a revoked key is refused within a minute. No key of yours, Anthropic's or OpenAI's, ever reaches an agent pane: the app strips them from the environment before a coding agent starts, so an agent runs on your login and nothing else.
A workspace may hold its own Anthropic API key as a fallback for when no app is running. It is encrypted on the server before it is stored and is never read back out through the API; the only thing anyone can see is whether one is set.
GitHub
Through the GitHub CLI on your machine, with your own login and its scopes. Snovi asks for no OAuth grant over your repositories, and holds no GitHub token of yours on the server.
Money
Snovi never bills for model usage and has no credit meter inside the price. The card is held by Stripe and sold through Link; Snovi's server never sees it. An agent cannot spend anything: a proposal that costs money waits for a person, and some kinds can never be approved for automatic execution at all. Cancel from Settings; a subscription that ends leaves the workspace readable, not gone.
Who else handles anything
- Hetzner runs the server, in Nuremberg. Neon holds the database, in Frankfurt.
- Stripe and Link take the payment and send the receipts.
- Resend sends Snovi's mail: sign-in links, invites, and the decision links when an agent needs you.
- Anthropic and OpenAI serve the models, through the plans you hold and the CLIs on your machine. Snovi's server sends them nothing.
Removing a workspace or a person
An owner removes a member under Settings; their sessions end and the app's key for that person is refused. To remove a workspace, or to see or export what we keep about you, use the contact form. Removed rows are labelled and kept out of every screen; the privacy page says how long anything is retained.
Reporting a problem
The contact form reaches the two people who build Snovi, in their own inboxes, and we reply within one working day. For anything that looks like a security issue, say so in the first line and we treat it first.
Changes
When this page changes, the date at the top changes, and anything that matters is noted in the changelog.