Privacy
Last updated 22 September 2026
A draft. These pages describe how Cira actually works today, but they have not been reviewed by a lawyer yet. If you are considering Cira for a company that needs a signed agreement, write to hello@cira.dev and we will work from your paper.
What Cira holds
About people: name, email address, and which company and role they have. Sign-in itself is handled by Clerk; Cira keeps no password.
About your software: each app’s name and address, what it was built from, which operations it offers, its deploy history, its workers and timetables, and the names of its environment variables.
About use: who ran which operation, from where, and how it ended; which app someone opened; what a question to Ask Cira cost. Never what an operation was called with, what it returned, or what anybody asked.
What Cira does not hold
The values of your environment variables. They pass through Cira on their way to Google and are never written to its database or its logs - only a fingerprint, so a page can say a value changed.
Your apps’ own data. Cira never copies it out of an app. When an app asks Cira for a database or a cache, Cira makes one for that app alone - a database on Neon, a cache on Upstash - and hands the app its address; the rows in it are the app’s, Cira never reads them, and removing the app deletes the database. Your apps’ logs stay in Google Cloud and are read on demand by people who manage them.
Ask Cira conversations, which live in the browser tab that holds them. No session replay, ever: Cira’s screens show companies’ own data.
Who else sees it
The companies listed under subprocessors, each for one job. Cira does not sell anything about you, and does not use your data to train models. Source files are sent to Anthropic at deploy time to describe what an app can do, and questions to Ask Cira are answered there; neither is used for training under Anthropic’s commercial terms.
How long
While your space exists. Deleting a space deletes its apps, people, history and records; it cannot be undone. Backups roll off on their own within weeks.
Your choices
Any admin can export everything Cira holds about the company as one file, from Settings. An owner can delete the space from the same page. If you want a person’s own record removed, or have any other request about personal data, write to privacy@cira.dev.
Where it lives
The United States. If you are in the UK or the EU and need a data processing agreement or the standard contractual clauses, write to privacy@cira.dev and we will send one.