Vividha Enterprise Private Limited ("we", "us") operates Longwave. This policy explains what we collect, where your work lives, and who else receives it. It covers the Longwave desktop, web, and mobile apps, runtimes on machines you own, Longwave Cloud, Longwave Connect, and plugins built by Longwave.
Account information
You sign in with Google, GitHub, or Apple. We store the name, email address, and profile image that provider shares with us, plus a session that can include your IP address and the browser or app you used.
If you save a secret on your Longwave account so another of your devices, or a Longwave Cloud machine, can use it, we store that secret encrypted. That includes a harness key, a plugin secret, and a token for a service you connect. We use it only to do what you asked.
Work on a machine you own
A thread on a machine you own stays on that machine. That includes the conversation, the files, and the harness credentials that belong to that runtime. We do not keep a copy of that thread on our servers.
api.longwave.run runs on Cloudflare. It handles sign-in, finds
your devices, and sets up the connection, including through Longwave Connect.
If two of your devices cannot connect directly, Cloudflare relays the
encrypted traffic. It does not store the conversation.
Longwave Cloud
A thread on Longwave Cloud runs on a machine we rent. That machine holds the same kinds of things a machine of yours would: the repository, the files, and the thread. We currently rent machines from OVHcloud and Hetzner, and we may add other providers. We choose the region by cost. OVHcloud machines are in Gravelines, France (GRA11) for now.
Harnesses, plugins, and connected services
When a thread uses a harness you signed into, such as Claude Code, Codex, Cursor, or OpenCode, that provider receives the prompts for that thread under your own account. Their terms and privacy policy apply to what they receive.
A plugin built by Longwave is part of Longwave. A plugin you install from someone else is that author's product, under their terms. A service you connect, such as GitHub, is governed by that service. A built-in connector sends that service only what the connector needs, using the credential you attached. We still handle that credential and the request we send.
Payments
Paid plans are billed by Dodo Payments. You enter payment details on Dodo's checkout page. We do not receive or store your full card number. We keep your plan, subscription status, billing period, and the subscription identifier Dodo assigns, together with the account identifier we send Dodo so the payment can be matched to you.
How we use information
We use this information to:
- Sign you in and run Longwave on your devices and on Longwave Cloud
- Apply your plan, and bill it
- Send a credential to the device or Cloud machine you asked to use
- Keep the service reliable and secure
- Tell you about changes to the service, these terms, or this policy
We do not train models on your content. We do not sell or rent your information.
How long we keep it
- Account information stays while your account exists.
- After a subscription lapses, a Longwave Cloud machine keeps running for 7 days, then stops. The disk is kept for 30 days after that, then deleted. Resubscribing during those 30 days brings the same disk back. Work on a machine you own is left as it is.
- A secret stays until you remove it, or until your account is deleted.
- Billing records are kept for as long as tax and accounting law requires.
Email [email protected] to ask us to delete your account. We will delete the personal data we hold, except records the law requires us to keep.
Where information is processed
We are in India. Account information is processed there and by the providers named in this policy, including Cloudflare and Dodo Payments. Longwave Cloud machines run in the region we select, currently Gravelines, France, and in other regions if a different provider is cheaper. If a law that applies to you requires a particular safeguard for that transfer, contact us and we will use one.
Your rights
Depending on where you live, including India and the EEA or UK, you can ask us to access, correct, or delete personal data we hold about you, and you can object to or restrict some processing. Email [email protected]. We may ask you to confirm it is you, and we will answer within the time the law requires. You can also complain to the data protection authority where you live.
Age
Longwave is for people who are at least 18. We do not knowingly collect information from anyone younger.
Changes
We may update this policy. The date at the top changes when we do. If we change the company that controls your personal data, we will tell you by email or in the app before the change takes effect. We may assign this policy to an affiliate, including a company we form later to distribute Longwave.
Contact
Vividha Enterprise Private Limited
CIN U46909WB2025PTC279295
Flat A 301, Girikunj, 390 S. N. Roy Road, Kolkata, West Bengal 700038, India
[email protected]