Privacy details
Coral by Subgentic.ai
Last Updated: October 20, 2026
This page holds the full detail. The short privacy policy is on the Privacy Policy page.
At Subgentic.ai ("We," "Us," "Our"), we take your privacy seriously. This Privacy Policy explains what data we collect, why we collect it, and how we protect it when you use the Coral website (coralhub.dev) and the Coral Desktop Application.
1. What We Collect
1.1 Data We Collect Automatically
Website Analytics
We count page visits on our site to understand traffic patterns. We collect:
- Page views and referral sources
- Browser type and screen size
- No cookies and nothing stored in your browser, no cross-site tracking
- We respect Do Not Track and Global Privacy Control: if either is set, nothing is counted.
- The analytics keep no IP address and record no location
- Our hosting provider's edge network may set one short-lived security cookie (for bot management) when you visit; we do not use it to identify or track you (details in section 3).
1.2 Data the Desktop Application Sends
Crash Reports: none
Coral does not send crash reports. If something fails, it is written to a local log on your machine that is never uploaded.
Usage Analytics: on by default, and you can turn them off
Release builds of Coral send usage analytics to PostHog by default. They are sent to PostHog's servers in the United States, which is an international transfer of this data. The install ID is a random identifier that is not linked to an account. We collect a random install ID, the Coral version and edition, your operating system and architecture, the platform, a run ID and the entry point you started Coral from, and your IP address with the approximate location (such as country and postal code) worked out from it, plus a fixed list of product events: install, upgrade (with the release number of the last version that ran with analytics on), app opened, weekly active, launches and their outcomes (with counts), task outcomes, prerequisite checks, four dashboard events, and two update events. The update events say that a notice about a newer release was shown (by the dashboard or the tray) and that the person opened the release page the notice offers. They carry only release numbers, where the notice was shown, and its release channel; they do not say that anything was installed.
Usage analytics never include prompt text, file paths, repository or agent names, or the content of your work, and nothing from your AI agent sessions.
To turn usage analytics off, use Settings › Usage analytics, or set the environment variable CORAL_TELEMETRY_DISABLED=1. Before Coral v1.4.120 the tray app ignored the Settings switch, so update to v1.4.120 or later. If Coral cannot read the setting, analytics stay off. With usage analytics off, nothing is sent and nothing is remembered, update events included. The update check to GitHub (below) is separate and the analytics setting does not affect it.
Update check
At start-up Coral makes an anonymous request to GitHub to find out the latest version. The server, the tray and the dashboard each make it, it sends no identifier, and it has no off switch: the analytics switch does not cover it.
Coral Hub
Nothing is sent to Coral Hub until you connect a machine to it.
Network access on your machine
Since Coral v1.4.114, Coral listens on this computer only, unless you turn remote access on. With remote access on and no host set, other devices on your network can connect.
1.3 Beta Access Requests
If you ask for access to the Coral Hub closed beta on coralhub.dev, we collect the email address you enter, the plan you are interested in (Individual or Team), for a team its size, and any note you choose to add. We use them only to contact you about beta access. We do not use them for marketing and we do not use them for advertising. We do not share them with anyone other than the service providers that host the site and the hub for us. Please do not put sensitive personal information in the note field.
We use your IP address to limit repeated requests. Our servers also record it in their request logs, which we keep for up to 30 days.
We keep a request for 12 months, or until the closed beta ends if that is sooner, and then delete it. You can ask us to delete your request at any time by writing to support@subgentic.ai, and we will delete it promptly.
1.4 Data We Never Collect
We do not collect, transmit, or have access to:
- Your source code or files
- AI agent prompts, instructions, or output
- Agent session content or terminal output
- Message board messages between your agents
- Git repository content, commit history, or branch names
- File paths or directory structures on your machine
- API keys or credentials for AI services (Claude, Gemini, etc.)
- Screen recordings, screenshots, or keystrokes
Coral is a local-first application. All agent orchestration, communication, and monitoring happens entirely on your machine.
2. How We Use Your Data
| Data | Purpose | Retention |
|---|---|---|
| Website analytics | Improve the website | 24 months |
| Beta access request details (email address, the plan you ask about, a team size, and any note you add) | Contact you about Coral Hub beta access | 12 months, or until the closed beta ends if sooner; deleted on request |
| Usage analytics (including approximate location) | Understand feature usage | Retained as long as needed for product analytics |
We do not sell, rent, or share your personal data with third parties for their marketing purposes.
3. Third-Party Services
We do not use advertising services or tracking pixels. Coral Hub subscription payments are handled by Stripe: you enter your payment details on Stripe's page, never on Coral Hub, and Coral Hub does not store card numbers. See the billing privacy and billing terms.
Usage analytics from the desktop application, and page-visit counts for our site, are processed by PostHog in the United States (see section 1.2).
The videos on our website are hosted by Loom. They load only when you press play, and Loom's own privacy policy then applies.
This website is delivered through DigitalOcean's App Platform, which serves its pages through Cloudflare's network. As with any web host, DigitalOcean and Cloudflare see the IP address and browser details sent with each page request. They deliver the pages; we do not use them for advertising or tracking. Cloudflare sets one security cookie on website pages, including the interactive demo at demo.coralhub.dev, __cf_bm (HttpOnly, Secure, about 30 minutes), for its bot management. It is set by Cloudflare, not by us, and we do not read or use it.
4. Data Security
We protect your data using HTTPS/TLS encryption for all data in transit, encrypted storage for customer records, access controls limiting data access to essential personnel only, and regular security reviews of our infrastructure.
No system is perfectly secure. If we become aware of a data breach affecting your personal information, we will notify you promptly as required by applicable law.
5. Your Rights
You may access your data, correct inaccurate information, delete your account, turn off usage analytics at any time in Settings › Usage analytics or with CORAL_TELEMETRY_DISABLED=1, and export your data upon request.
If you are in the EEA (GDPR) or California (CCPA/CPRA), additional rights apply. Contact us for details.
6. Children's Privacy
Coral is not directed at children under 13. We do not knowingly collect personal information from children under 13.
7. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date.
8. Contact
Subgentic.ai
Website: coralhub.dev
General inquiries: hello@subgentic.ai
Support: support@subgentic.ai
For privacy-related inquiries, please include "Privacy" in the subject line.