Skip to content
Download

Legal

Privacy Policy

Effective date: November 2, 2026

The short version. Oddboro is open source software that runs on your own Mac. Its database lives on your Mac. New Altitude, Inc. operates no server that receives, stores or processes your data, and the software sends us no telemetry, analytics or crash reports. When you connect the software to Anthropic or another service, your data goes to that service under your own account and its own terms, never through us. This website is static files: no cookies, no analytics, no forms, no third-party requests. Today we hold no personal data about you. If that ever changes, we will update this policy, say so in the repository and on this site, and change the effective date above.

1. Who we are

Oddboro is published by New Altitude, Inc. ("New Altitude", "we", "us"). We publish the software under the Apache License 2.0 at github.com/New-Altitude/Oddboro and we run this website at oddboro.com.

You can reach us about privacy at:

2. What this policy covers

This policy covers two things, and they work differently.

  1. The website at oddboro.com and its subdomains. We publish it. Section 3 explains what it collects.
  2. The software, Oddboro, which you download and run on your own Mac. We publish the code. You run it. Sections 4 through 7 explain what it does with your data and where that data can go.

It does not cover:

  • GitHub. When you visit, clone, star, or open an issue in the repository, GitHub collects what GitHub collects under GitHub's privacy statement.
  • Anthropic, Ollama and any other service you connect the software to. Each one handles your data under its own terms and privacy policy. Section 5 lists them.

Definitions

  • "Office" means your running copy of Oddboro: the floor, the Odds in it, and their records.
  • "Owner" means you, the person who runs the office.
  • "Odd" means an AI worker in your office. Each one runs through Claude Code under your own Claude account or Anthropic API key.
  • "Ledger" means the office's database of Odds, chats, asks, tasks, reports, decisions, goals and access grants.
  • "Personal data" or "personal information" means information that identifies or relates to an identifiable person.

3. The website

This website is a set of static files. We built it to collect nothing.

  • No cookies. The site sets none and reads none.
  • No analytics or tracking. No page views, no events, no pixels, no fingerprinting.
  • No third-party requests. The site serves its own fonts, styles, scripts and images. Your browser contacts no other company to show a page.
  • No forms or accounts. There is nothing to fill in and nowhere to sign up.
  • One setting, kept on your device. If you pick the day or night look in the header, the site remembers it in your browser's local storage. That value never leaves your device, and clearing the site's data removes it.

Server logs. The provider that hosts the site may keep standard server logs for security and to keep the service running. A typical log line holds the IP address a request came from, the browser's user agent string, the time, and the page requested. We do not add to those logs, we do not use them to identify or profile anyone, and we do not combine them with anything else. The provider keeps them for its own standard period under its own policy.

Links. The site links to GitHub, Anthropic, Ollama and others. Once you follow a link, the site you land on governs.

4. The software runs on your Mac

Everything Oddboro stores, it stores on the Mac you run it on. We verified this against the code, and because the code is open, you can too.

Where your data lives

Data Where it is
The ledger: your name, Odds and their job descriptions, chats, asks, tasks, reports, decisions, goals, access grants, per-run token counts A Postgres database on your Mac. By default it runs inside the office at ~/.oddboro/db.
Each Odd's working files ~/.oddboro/staff/<id>/
Each Odd's Claude Code transcripts: the chats and runs Claude Code keeps so it can pick up where it left off ~/.claude/projects/, in a folder named after the Odd's folder
Your Anthropic API key (if you use one) and sign-ins for other hosted tools The macOS Keychain, under the service name oddboro
Family and people data (names, birthdays, schedules) The data/ folder in your copy of the repository. Git ignores it, so it never enters a commit.
Office settings (which model, plan or key, time zone) The .env file in your copy of the repository. Git ignores it.
Backups made by npm run reset ~/.oddboro/backups/<date>/

You may point the office at a different Postgres database by setting DATABASE_URL in .env. If you choose a database hosted by someone else, your ledger goes to that provider under your agreement with them. That is your choice, and we are not part of it.

What never happens

  • No telemetry. The software contains no analytics, crash reporting, usage reporting or "phone home" code. We checked for it. There is none.
  • No New Altitude server. We run no service that your office connects to. There is no account with us, no sync, no cloud copy.
  • No remote access. The office listens on 127.0.0.1 only, so nothing outside your Mac can reach it. Its built-in database does the same. If you choose the https://local.oddboro.com address during setup, the Caddy proxy that serves it listens on ports 80 and 443 and answers only for that name, which resolves to 127.0.0.1.
  • No sale or sharing. We never receive your data, so we cannot sell it, share it, rent it or use it to train anything.

Local search embeddings

If you install Ollama and the nomic-embed-text model, the office turns ledger text into vectors so Odds can search decisions by meaning. That request goes to Ollama at 127.0.0.1:11434 on your Mac and nowhere else. Without Ollama, search works by words only and nothing changes about where data lives.

macOS features the software uses

  • Notifications. An Odd can ping you with a macOS notification. The software asks macOS to show it. Nothing leaves the Mac.
  • Keychain. Secrets go in your Keychain, never in a file or the database.
  • Login item. Setup registers the office with launchd so it starts when you log in. npm run service:uninstall -w apps/office removes it.

Fonts in the office interface

The office carries its own fonts (Pixelify Sans and Inter). Opening it makes no request to any font service.

5. Services the software connects to at your direction

Oddboro is useful because it connects your Odds to the tools you already use. Every connection below happens only when you set it up, under your own account, and under that service's own terms and privacy policy. New Altitude is not a party to any of it and receives nothing from it.

Anthropic (Claude)

Your Odds think by running Claude Code, Anthropic's command line tool, on your Mac. Each chat message and each scheduled job becomes a Claude Code run under either your Claude plan sign-in or an Anthropic API key you give the office. The office stores an API key in your Keychain.

What goes to Anthropic in a run:

  • Your message, the Odd's job description, your name and time zone, the goals the Odd serves, and the office's standing instructions.
  • Whatever the Odd reads to do the work: ledger search results, the items it pulls from tools you connected, files you attach to an ask or task, and the Odd's own working files.
  • A headshot, if you give one when hiring an Odd, so Claude can draw a likeness. The photo goes to that drawing run only. The office never stores it, or Claude's notes on the face.
  • Setup also runs npm install -g @anthropic-ai/claude-code, which downloads Claude Code from the npm registry, and claude auth login, which sends you to Anthropic to sign in.

Anthropic processes all of this under your agreement with Anthropic: its Consumer Terms and Privacy Policy for a Claude plan, or its Commercial Terms for an API key. Anthropic's retention and training rules are Anthropic's, and your settings there control them. New Altitude never sees any of it.

Ollama

Local only. See section 4.

GitHub

You clone the software from GitHub. If you choose the https://local.oddboro.com address during setup and your Mac has no Caddy, the office downloads the official Caddy release from GitHub (api.github.com and GitHub's release files) and checks it against the published checksum. GitHub sees those download requests.

npm and PyPI

Setup installs the software's dependencies from the npm registry. When an Odd asks for a new tool and you approve it, the office runs that tool from npm (npx) or PyPI (uvx). Each registry sees the download request.

The MCP Registry

When an Odd looks for a tool it does not have, the office searches its own catalog first, then the public MCP Registry at registry.modelcontextprotocol.io. Only the search words leave your Mac.

Other tools you connect

An Odd may ask for a hosted tool (a service reached over the network). You approve or deny every connection, and you sign in to the service yourself. The office keeps the sign-in tokens in your Keychain and refreshes them before each run. Data the Odd reads from or writes to that service goes to that service under its own terms. Each Odd gets only the access you give it: a tool connects read only, or with write while the Odd holds the Act level. A write-level grant to one Odd for one tool is your standing permission for that Odd to use that tool without asking each time. You can lower the Odd's level, which pauses the grant, or revoke the grant from the Odd's Access tab at any time.

6. Data retention and deletion

What we keep: nothing

New Altitude keeps no personal data about users of the software, because none reaches us. We keep no account records, because there are no accounts. The only data that can exist about your visit to this site is the hosting provider's server log described in section 3.

What is on your Mac, and how to delete it

Everything in the table in section 4 stays until you remove it. You control retention entirely.

To start the office over without deleting anything:

  1. Run npm run reset from your copy of the repository.
  2. Type reset when it asks.
  3. The office stops, and its database, Odd folders and a copy of .env move into ~/.oddboro/backups/<date>/. Nothing is deleted. data/ stays in place.

To delete everything the software stores:

  1. Run npm run service:uninstall -w apps/office to stop the office and remove its login item.
  2. Delete the ~/.oddboro folder. This removes the database, Odd folders, working copies and backups.
  3. Delete the folders in ~/.claude/projects/ whose names contain oddboro-staff. These are the Odds' Claude Code transcripts.
  4. Delete the data/ folder and the .env file in your copy of the repository, or delete the whole repository folder.
  5. Open Keychain Access, search for oddboro, and delete the items you find. These are your Anthropic API key (if you gave one) and sign-ins for hosted tools.
  6. If you named your own DATABASE_URL, delete that database yourself. The reset command leaves it alone.

Anything an Odd sent to Anthropic or another service during a run is held by that service under its own retention rules. Delete it there.

7. Security

We designed the software so that the easiest path is also the safe one. These are the measures in the code today:

  • The office and its database listen on 127.0.0.1 only. Nothing on your network can connect to them.
  • Secrets (your API key, hosted tool sign-ins) live in the macOS Keychain, never in a file or the database.
  • Each Odd runs through Claude Code's permission system with a narrow tool list: it reads only its own folder, the data/ folder and its own Claude Code transcripts, writes only inside its own folder, and uses the office's own tool server and the connections you granted. Everything else is denied, including other Odds' folders, your sign-ins and folders like ~/.ssh.
  • The software is open source. Anyone can read it, audit it and report a problem.

No software is perfectly secure. Your Mac's own security (its login, disk encryption, updates and the people who can sit at it) is the outer wall around everything above, and it is yours. If you find a security problem in Oddboro, email privacy@oddboro.com.

8. Children

Oddboro and this website are not directed to children. We do not knowingly collect personal data from anyone under 13, or under 16 where the law sets that age. Since we collect none from anyone, we have nothing to delete. If you believe a child has given us personal data somehow, email privacy@oddboro.com and we will delete it.

9. International users

New Altitude is a company in the United States. This website is static files served by a hosting provider, which may serve them from locations around the world. The software runs on your Mac in whatever country you are in, and we move nothing from it. If you connect the software to Anthropic or another service, that service's own policy explains where it processes data and on what legal basis.

If you are in the European Economic Area, the United Kingdom or Switzerland: when you run the software, you decide what data goes in and where it goes, so you are the controller of that data (or you use it for purely personal or household purposes, which the GDPR does not cover). New Altitude is neither a controller nor a processor of it. For the website, the only processing is the hosting provider's server log, which rests on legitimate interest in keeping the site secure and running (GDPR Article 6(1)(f)).

10. Your privacy rights

Laws including the EU and UK GDPR, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and the privacy laws of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and other US states give you rights over personal data a business holds about you. Those rights include knowing what is collected, getting a copy, correcting it, deleting it, limiting its use, opting out of its sale or sharing, and not being treated differently for exercising a right.

We respect all of these. Honestly stated, here is how they apply:

  • We hold no personal data about you, so there is nothing for us to show, copy, correct or delete. If you ask, we will confirm that in writing.
  • We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use it for targeted advertising or profiling. We have not done so in the preceding twelve months. There is no opt-out to exercise because there is nothing to opt out of.
  • We do not collect sensitive personal information as those laws define it.
  • We do not discriminate against anyone for exercising a privacy right.
  • Data on your Mac is under your control, and section 6 explains how to delete it.
  • Data at Anthropic or another service is held by that service. Exercise your rights with them directly.

To make a request anyway, email privacy@oddboro.com. We will answer within the time the applicable law allows (45 days under the CCPA, one month under the GDPR), and we will not ask you to verify more than we need to answer, which for a company holding no data is usually nothing. An authorized agent may make a request on your behalf with written permission from you.

If you are in the EEA or the UK, you have the right to complain to your data protection authority. We would rather hear from you first.

11. Do Not Track and Global Privacy Control

The website tracks nothing, so a Do Not Track header and a Global Privacy Control signal change nothing: there is no tracking to turn off. We treat both as honored.

12. Future features and changes to this policy

Today the project is the software and this site. We may add community features later: forums, accounts, shared offices, or a hosted service. Any of those would mean we collect some personal data for the first time, and this policy would have to change before that happens.

When we change this policy:

  1. We update the effective date at the top.
  2. We note the change in the release notes at github.com/New-Altitude/Oddboro/releases and on this page.
  3. For a material change, we post a notice on this site before it takes effect, and in the software's own release notes if the change concerns the software.
  4. A material change does not apply retroactively to data collected under an earlier version without your consent, where the law requires consent.

The version at oddboro.com is the current one. Earlier versions stay in the repository's history.

13. Contact