1. What LockDock Does
LockDock is a permission and delegation layer that lets you safely connect your accounts and services to AI agents. LockDock mediates all agent actions through bounded permissions, approval workflows, and full audit logging.
2. Information We Collect
When you use LockDock, we collect and store:
- Account information: Your name and email address from Google sign-in.
- OAuth tokens: Access and refresh tokens for services you connect (Google, GitHub, Slack, etc.). These are encrypted at rest and stored server-side only.
- Connection metadata: Which services you have connected, permission presets you have configured, and approval preferences.
- Activity logs: Records of actions requested by agents, approval decisions, and connection events.
- API keys: Keys you provide for API-based services (e.g., Stripe, OpenAI). These are encrypted at rest.
3. How We Use Your Information
- To authenticate you and maintain your session.
- To execute agent actions on your behalf through connected services.
- To enforce permission rules and approval workflows you configure.
- To display activity logs and audit trails.
4. How We Protect Your Information
- All OAuth tokens and API keys are encrypted before storage.
- Tokens are stored server-side only — they are never exposed to the browser, frontend code, or AI agents.
- All connections use HTTPS/TLS in transit.
- Agent actions are mediated through LockDock — agents never receive raw credentials.
5. Third-Party Services
LockDock connects to third-party services (Google, GitHub, Slack, Stripe, etc.) on your behalf. When you connect a service, LockDock receives and stores OAuth tokens or API keys to perform actions you authorize. Each service has its own privacy policy governing how it handles your data.
6. Data Sharing
We do not sell, rent, or share your personal information or credentials with third parties. Your data is only used to provide the LockDock service as described above.
7. Data Retention and Deletion
Your data is retained as long as your account is active. You can disconnect any service at any time, which revokes stored tokens for that service. You may request full account deletion by contacting us.
8. Your Rights
You have the right to:
- Access the data we store about you.
- Disconnect any connected service and revoke its tokens.
- Request deletion of your account and associated data.
9. Changes to This Policy
We may update this privacy policy from time to time. Changes will be reflected on this page with an updated date.
10. Contact
If you have questions about this privacy policy or your data, contact us at privacy@lockdock.ai.