What Dryos knows about you

Your account. An email address and a password, held by Supabase, our authentication provider. The password is stored hashed by Supabase and is never visible to us.

What you build. The workspaces, pages, tiles and components you create, and their revision history, so a change can be reverted. This is whatever you put into them — titles you write, the streams and nodes you chart, and anything you type into the chat that composes a page.

How much you use it. A daily count per page of queries run, rows returned and model tokens spent. It is a meter, not a log of what you looked at: it records the totals, not the questions.

Ordinary web analytics. Google Analytics runs on the public pages and records visits, referrers, approximate location derived from IP, and device and browser details. It sets cookies in your browser.

Server logs. Our hosts keep the usual request logs, including IP addresses, for operating the service and stopping abuse.

We do not sell personal data, and we do not buy it. We run no advertising network, and we do not track you across other sites.

The market data itself carries no personal information — it is grid prices, load, generation and weather, published by the operators. The building-permit streams are the one place a public source hands us personal details, and the collectors deliberately never read them: the contractor’s and applicant’s names, phone numbers and addresses are not requested from the source and are not stored. The contracting company is kept, because which firms pull permits where is the point of that feed.

The data server at https://api.dryos.ai/mcp needs no account and no key. It is anonymous: we see the request and its IP for rate limiting, and nothing that identifies who is asking.

The workspace server at https://www.dryos.ai/api/mcp requires you to sign in, and then acts strictly as you — it reads and writes only your own workspaces, and it deletes nothing. You approve the connection on a consent page before any tool runs. The AI client you connect is yours; what it does with what it reads is governed by that client’s own privacy policy, not this one.

We use a small number of processors, and no others:

• Supabase — authentication and the database holding your account and everything you build.
• Vercel — hosting for the website and its server routes.
• Anthropic — when you use the chat that composes or edits a page, your message and the page’s current contents are sent to Anthropic’s API to produce the reply. It is not used to train their models.
• Google Analytics — visit statistics for the public pages.

We will also disclose data where the law requires it, and if Dryos is ever acquired, account data would transfer with the business — you would be told before that took effect.

Your account and what you build are kept for as long as the account exists. Analytics and server logs are kept on our providers’ ordinary retention schedules, which are measured in months rather than years.

Email hello@dryos.ai to get a copy of your data or to have your account and its contents deleted. We will action a deletion request within 30 days. There is no self-serve delete button yet; saying so here is more useful than implying one exists.

Two kinds. A session cookie set by Supabase keeps you signed in — without it the workspace cannot work. Google Analytics sets its own cookies to count visits; blocking them costs you nothing on this site.

Dryos is a tool for energy and property professionals. It is not directed at children, and we do not knowingly collect data from anyone under 16.

When this page changes, the date above changes with it. A change that materially affects what we do with your data will be sent to the email on your account rather than left here to be discovered.

Questions about any of this go to hello@dryos.ai. The site is https://www.dryos.ai.