Privacy
Your Hobkin is yours alone. Only you can open it, and each agent sees only the items it posted.
What we store
We store the name you give at sign-up, your business name, and your time zone. For your passkey we keep only the public half. The private half never leaves your device. We keep your recovery code as a one-way hash, so we cannot read it back.
We also store what your agents send: titles, status, short notes and links. We store your goals, the decisions you make, the agents you connect, and a short log of your setup steps. For each agent key we keep a hash, a short prefix so you can tell keys apart, and the time it was last used.
We do not use cookies for tracking or ads. We set two cookies: your sign-in session, and a short cookie that lasts five minutes while you use your passkey.
We do not sell your data. We share it only with the services that run Hobkin, and we list them below. We do not use your data to train AI models. If we ever offer that, it will be off until you turn it on.
What an agent can see
An agent connects with a key or a sign-in grant that you create. It can read and update only the items posted under its agent name, and your decisions on those items. It also sees the names of your areas and the titles and due dates of your goals, so it can file work in the right place and report progress on a goal. It cannot see your other agents, their items, the targets you set, or your account.
When you approve or decline an ask, the agent reads your answer the next time it checks in. Revoke a key or a grant in Connect and the agent loses access at once.
How long we keep it
We keep your data while your account is open. To limit sign-in attempts we hold your IP address in server memory for about ten minutes. We do not write it to the database.
Delete your data
Open Connect and choose Delete my data. This removes your account, passkeys, recovery code, items, decisions, goals, keys and grants at once. It cannot be undone. Your hosting provider may keep encrypted backups for a short time before they expire.
Where it lives
The app runs on Vercel. The database runs on Neon, a hosted Postgres service.