Privacy

Your account: an id and your email address. Your labs and devices: their names, models and when they last spoke to us. Your approximate location, worked out from your connection, used to choose a nearby network route for your labs. Your usage and billing records.

Your lab itself is a computer we run for you, so whatever you and your elves put on it is held on it until you destroy it.

We keep your logs by default. That means your elves' conversations and your terminal output, exactly as they appeared. They can contain anything that was on screen, including passwords, keys and personal information. We store them encrypted, for 365 days unless you choose otherwise.

They are yours. In Bench › Elrond you can see them, turn logging off, change how long they are kept, and delete them at any time. Destroying a lab does not delete its logs; delete them there too if you want them gone.

We train a personal model (a LoRA) from your logs only if you press Cut my LoRA. We first run your logs through a filter that removes passwords, keys, tokens, card numbers, email addresses and similar. A filter can miss things, so review your logs before you press it. Your model is used for you. We do not use your logs to train models for anyone else.

In Bench › Elrond you can see your most recent LoRA and delete it at any time.

If you sign in to another agent on a lab, or link one, we keep that sign-in encrypted and may place it on your other labs, so you sign in once. See and remove them in Bench › Agents.

Sites you sign in to in your lab's browser stay in that browser. When you use Friendly mode for a sign-in or payment, that site's session is copied between your lab and your phone for you, through our servers, without being kept.

To show you your lab, its screen and pages pass through our servers on the way to your device.

Your lab's internet traffic normally leaves through your own device, your desktop or phone, while Elven Labs is open on it, so websites see your connection. Otherwise it leaves through a Mullvad VPN node, or through Amazon if you choose that. Secure connections stay encrypted end to end, and we do not record the sites visited or their contents through this route. Labs cannot reach your local network through your device.

Our test of each route's speed makes small requests to a few public websites.

Elrond is the agent your elves run on by default. Its replies come from third-party AI models through OpenRouter. What is sent is what any coding agent needs to do its work: what you and your elves say to it, and what it reads in your lab, which can include files, terminal output and web pages. If you switch an elf to another agent, that agent's provider handles what that elf sends, under your own account with them.

Amazon Web Services runs labs, storage and model training. Heroku runs our servers. OpenRouter and the AI providers behind it answer agents. Tailscale connects labs and devices. Mullvad carries traffic as above. Stripe, Square and Apple handle payments; we do not hold your card number. We do not sell your data.

Delete logs, your LoRA and sign-ins yourself at any time in Bench, and destroy a lab from Realms. To delete your account and everything under it, choose Delete account in the Elven Labs or Yumbutton app, or write to support. We keep only the billing records the law requires.