Privacy Policy

Effective October 24, 2026 · updated October 25, 2026

Omnius Labs makes Drey. This policy explains what we collect, why, and the choices you have.

What we collect

• Account details: your name, email and a hashed password.
• Workspace content: messages, files you attach, docs, tasks, agent settings and memory, and pull request details.
• Connections: GitHub access you grant and model API keys you add.
• Product usage: events such as sign-up, messages sent and pull requests opened, stored in our own database. We don't use third-party ad trackers.
• Billing: handled by Stripe; we keep your Stripe customer ID and plan, not your card number.

How we use it

To run Drey, to send content to the model provider and GitHub repository you chose when an agent works, to support you, to bill paid plans, and to improve the product from aggregate usage. We don't sell personal data and we don't train models on your content.

Who we share it with

Service providers that help run Drey (hosting, database, Stripe), the model providers and GitHub when you direct an agent to use them, and authorities when the law requires it.

Retention and deletion

We keep data while your account is active. Ask us to delete your account and we will remove your content within 30 days, except records we must keep by law.

Your rights

You can ask to access, correct, export or delete your personal data, and object to processing. Contact us through the contact form.

Security

Passwords are hashed, connections use HTTPS, and access to production data is limited. No system is perfectly secure; we will tell affected users promptly if a breach affects their data.

Changes

We will post updates here and notify you of material changes.