Privacy policy

Corewire is operated by Gooey Technologies Limited, a New Zealand limited company (company number 9395690, NZBN 9429053355720) with its registered office at 579d New North Road, Kingsland, Auckland 1021, New Zealand — the data controller for the processing described here. Write to hello@corewire.ai for anything in this document.

Corewire runs AI models on machines you own. Your prompts, your generated text, images, audio and video, the models themselves, and the per-invocation record of what ran where all live on your devices. We never receive them. What we hold is what an account and a device network need to exist — and this page lists all of it.

Your account. Your email address and your sign-in credentials — passkey public keys, authenticator-app enrolment, backup codes. We use them to sign you in and to send you sign-in codes and space invitations. Legal basis: performing our contract with you.

Your spaces and devices. Space names, who belongs to a space and with what role, device names, and the cryptographic keys and network endpoints (including IP addresses) our coordinator needs to connect your devices to each other. Legal basis: performing the contract.

Relay traffic — counted, never read. When two of your devices cannot reach each other directly, traffic rides our relay end-to-end encrypted: we cannot read it, and we do not try. We count bytes per device to meter your plan’s relay allowance: each device reports its own meter reading — the month, the device name, one byte count — and the panel shows the month against the plan. Legal basis: performing the contract.

Usage reporting — off by default. Your devices keep their own record of what ran. If you turn on reporting in Settings → Account, each device sends us a monthly rollup: counts and durations per modality, per device. Never content. Legal basis: your consent, which the same switch withdraws.

Billing. Pro and Team subscriptions are sold by Lemon Squeezy as merchant of record: they collect your payment details and billing address under their own privacy policy, and we receive the subscription’s status — plan, dates, state — never card numbers.

Email you send us. Mail to our published addresses, and the enquiry form on the pricing page, land in a mailbox a person reads. The enquiry form sends your address and message as one email and stores neither in any database of ours.

This website. We measure how the website is used with cookieless analytics: aggregate page views, referrers, country and device class — no advertising, no cross-site tracking, no profile of you, and nothing that follows you off this site. Cookies exist only to keep you signed in to the panel. Legal basis: our legitimate interest in knowing whether the website works.

Prompts and chats. Generated media. Models and their weights. The routing record — your devices’ own log of every invocation — which you can export and purge from the app. Unless you turn on usage reporting above, not even the counts leave your machines.

Account, space and coordination data live on a server we operate at DigitalOcean (Sydney region), with encrypted-in-transit nightly backups to object storage at Cloudflare. The panel and this website are hosted on Vercel. Some of these providers process data outside the EEA; each does so under its data processing agreement with us, incorporating the European Commission’s standard contractual clauses.

Account data: until you delete the account, which you can do yourself in the panel — it also gives you a data export first. Shared spaces you leave behind keep standing for their other members; what is deleted is you. Backups age out after thirty days. Aggregate usage counts, where you enabled them, are kept while the space exists.

Access, rectification, erasure, portability, restriction and objection, as New Zealand’s Privacy Act 2020 — and, where it applies to you, the GDPR — give them to you. Export and deletion are self-serve in the panel; for anything else, write to hello@corewire.ai. You can complain to the Office of the Privacy Commissioner (privacy.org.nz) or your own supervisory authority.

Disclosure policy and contact: security@corewire.ai, detailed at /.well-known/security.txt on every host we answer on.

We will announce material changes by email to account holders before they take effect, and this page always states its effective date.