Privacy

Privacy policy

Chloe is software you install and run yourself. What it reads stays on your machine. This page says what that means, and what this website collects.

Last updated 11 October 2026.

Who we are

Chloe (the npm package @chloejs/core, called “chloe” here) and this website, chloejs.org, are made by Carlos Martinez. Write to info@chloejs.org with any question about this policy.

This website

chloejs.org has no accounts and no forms. It uses Google Analytics to count visits and clicks on its buttons. Google Analytics sets cookies and receives your IP address, browser and the page you are on. It is told the page without anything after the ? in the address. We use those numbers only to see which pages are read. You can block it with any content blocker, or with Google’s opt-out add-on.

The site is hosted on Vercel, which keeps standard request logs. Its fonts come from Google Fonts.

The chloe runtime

chloe runs on a computer you choose: your laptop, your server. It keeps its settings, its history and any keys it is given in files and a SQLite database on that computer. Nothing it stores is sent to us. We run no server that your copy of chloe talks to, and we cannot see your agents, their runs or your data.

Your agents send what you tell them to the services you set up: the LLM provider you choose (for example Anthropic or OpenAI), and chat or email services. Those providers handle that data under their own policies.

Google account data

If you connect a Google account, chloe asks Google for permission to do only what your agents use:

• Gmail, read (gmail.readonly): to find and read the emails an agent is set up to look at, for example a daily summary of a newsletter.
• Gmail, send (gmail.send): to send emails an agent writes for you, such as a report to your own inbox.
• Calendar events (calendar.events): to read and add events on your calendar when an agent is asked to.
• Drive, read (drive.readonly): to read files an agent is pointed at.

You can approve fewer of these, and chloe asks only for the ones your agents name. The key Google returns is saved on your own computer, in chloe’s state folder. Your Google data goes from Google to that computer and nowhere else, except to the LLM provider you configured when an agent step needs it read or written. It never reaches us or this website.

The page chloejs.org/connected, where Google sends you after you approve, shows a one-time code for you to paste back to your agent. The code stays in your browser: the page sends it nowhere, and it is useless without a secret that never leaves your computer.

chloe’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Google data is used only to do what your agents are set up to do for you.
• It is not sold, not used for advertising, and not used to train any AI or machine learning model.
• No person reads it, unless you ask for help and share it yourself.

Keeping and deleting

Everything chloe keeps is on your computer, so you control it: delete chloe’s state folder to remove it all. To cut off Google access, remove chloe at myaccount.google.com/permissions.

Children

chloe and this website are not meant for children under 13.

Changes

If this policy changes, this page will say so, with a new date at the top.