Privacy
Your privacy and security, in plain words: what we store, where we keep it, who can read it, and how you take it back.
What we store, and where
Warthog uses Microsoft Azure Australia East as its primary hosting region. We keep your identity details, your cards, the activity record of what your agents do, your memory and skills, and the rules and budgets you set for each agent. Warthog is intended for people around the world. Some data is processed outside Australia to provide the services described below.
Your most sensitive details are encrypted on your device
Your most sensitive identity details — such as your passport or licence numbers — and your cards are encrypted on your own device, with a key that stays with you. Warthog only ever stores the encrypted version.
That means Warthog's servers cannot read them, and not even our staff can unlock them while they are stored. We show only your card's brand and last four digits, and we never keep a card's security code at all.
A release only happens when you approve it
When an agent needs one of these details or a card, that value passes through Warthog once — only for the single release you approve from inside the app — and is discarded the moment it has been handed over or the request expires. It is never kept afterwards.
Export or delete everything, any time
You can export everything Warthog holds about you whenever you like, and you can delete your account yourself, at any time, from your settings. Deletion cuts off access and schedules removal from the live application. Provider records, delivered messages in your inbox or on your phone, and backups follow their own retention schedules; deleting Warthog does not recall messages or delete data in your Google or Microsoft account. Application database backups may retain older data until their retention period ends.
We keep a separate deletion record containing only an account identifier, deletion status and timestamps, so recovery from an older backup does not restore access to a deleted account. These records are protected from deletion for at least 42 days and retained until a reviewed cleanup removes expired records. They contain no email address, account content or encryption key. Encrypted receipt history can also remain during backup retention.
Who handles your information
Warthog is operated by RPR Technologies Pty Ltd. Contact oren@nava-co.com for privacy questions, access or correction requests, deletion help or complaints. Our Terms of use explain the service and optional messaging program.
Email, SMS and overseas processing
Resend delivers transactional email, such as sign-in codes and security notices. It receives your email address and the message, which may contain a short-lived code or link. Resend stores email content and delivery logs in the United States, regardless of its sending region. Its service providers support hosting, delivery, security and abuse detection; see Resend's subprocessor list.
When you request a verification text or enable SMS alerts, Twilio validates your international phone number and delivers the message through mobile carriers. Our SMS integration uses Twilio's United States region; Twilio, its subprocessors and destination carriers may process your number, message and delivery information in other countries. SMS is available only for enabled destinations and supported networks, not in every country. You can turn off SMS alerts in notification settings and use email or in-app approvals instead.
We do not sell your phone number or SMS consent, or share them with third parties for their marketing. Messaging providers receive the information needed to deliver the service, prevent abuse and honour opt-outs. Requesting a code does not opt you into approval alerts. We record your alert preference and when it changes. Reply STOP to stop texts or HELP for help; provider suppression is separate from the preference in Warthog.
We use encrypted connections to these providers and keep messaging credentials on the server. Messages contain only the information needed for verification or a notification, not your stored card details, vault keys or connected-service credentials. Email and SMS providers can read the messages they deliver; they are not end-to-end encrypted.
We request message-body redaction for Twilio texts. This is not immediate erasure from carriers or restricted compliance records. Phone numbers may be retained for delivery, fraud prevention and opt-out suppression. Resend normally retains email content and logs for 30 days on its standard plans; provider backups and legal obligations can have separate retention periods. Turning off SMS stops future alerts but does not erase past messages.
Connections and push notifications
If you connect Google or Microsoft services, those providers process the permissions and data needed for the actions you authorise under their own policies and account settings, which may involve other countries. Your browser or device provider also processes push delivery information. Our push alerts use generic text rather than the details of an approval. An agent you authorise, and a device you use outside Australia, may receive data overseas when you choose to access or release it.
Your connected Google and Microsoft data
Connecting a service lets Warthog and the agents you authorise access the email messages, calendar events or files covered by the permissions you grant. We use this access to carry out the requests allowed by your rules and approvals. Results are returned to your requesting agent; review that agent's data practices before connecting it. We store encrypted access credentials, an account label and activity records so you can manage and review the connection. Disconnecting removes Warthog's stored connection credentials; you can also revoke access in your Google or Microsoft account.
Warthog does not sell connected Google data, use it for advertising, or use it to train general-purpose AI models. Our use and transfer of data received through Google APIs must follow the Google API Services User Data Policy, including its Limited Use requirements. This policy does not mean Google has verified or endorsed Warthog. Contact our privacy address if you need help accessing or deleting connected-service data held by Warthog.