Legal

Privacy policy

Last updated 16 October 2026

Pragma runs on your computer, and almost everything it does stays there. This page lists the few things that do leave your machine, who receives them, and why.

Pragma and this website are provided by Systo AI (“we”, “us”). Questions about this policy, or requests about your data, go to systo.ai@gmail.com.

The short version

• Your conversations, agents, files and transcripts are stored on your computer. We never receive them.
• When your agents use an AI model, the app talks to that model's provider directly, with your own account or key. It does not go through us.
• The app contacts our servers for four things: checking your licence, checking for updates, the connected apps service, and support reports you choose to send.
• The app sends usage analytics (which features are used, never what you write) unless you turn them off in Settings. It does not send crash reports.
• We do not sell your data, and we do not use it for advertising.

What stays on your computer

Your chats, agent settings, skills, routines, recordings you make to teach a skill, logs and diagnostics are stored locally. Your licence key and any credentials you give the app are stored encrypted with your operating system's own encryption (Windows' data protection, or the macOS Keychain); if that is not available, Pragma refuses to store them rather than write them in plain text.

When you buy Pragma

Purchases are handled by Freemius, our merchant of record. Freemius collects your name, email address, billing country and payment details to take payment, calculate tax, prevent fraud and send your receipt and licence key, and processes that information under Freemius's privacy policy. We never see your full card details. Freemius shares with us what we need to deliver your licence and support you: your email address, name, country, what you bought, your licence key and the status of the order (for example, completed or refunded).

For each licence we keep the key (encrypted, and as a one-way hash for checking it), the email address it belongs to, the order IDs from the purchase, and whether it has been refunded. These are stored on Cloudflare. Your key is emailed to you from systo.ai@gmail.com, a Google Gmail account that our service sends through Composio.

If you use Email my key on the download page, we use the address you type only to look up and send your key, and keep a record of the request for one day to limit how often one address can be emailed. The page shows the same message whether or not that address bought Pragma.

Licence checks

To confirm that a licence key is valid, the app and the download page send the key to our server at trypragma.xyz. The app checks when you activate the key and when you open the licence settings, and remembers a successful answer for 24 hours. The request contains your licence key and nothing else: no machine identifier, no hardware fingerprint and no usage data. Our server checks the key against our licence records and replies whether it is valid.

Update checks

The installed app checks for updates 15 seconds after it starts and then once an hour, asking trypragma.xyz, which points the app to the installer. If a licence key is stored, the check includes it; while Pragma is free the key is not checked. Installers are hosted on GitHub, and your licence key is never sent to GitHub. Downloading and installing an update only happens when you choose to. The download button on our website links straight to the installer and sends nothing about you.

Connected apps

Pragma can connect your agents to other apps, such as email, calendars or documents, through a connection service run by us on Cloudflare and powered by Composio.

• Registration. When the installed app starts for the first time, it registers with our connection service and receives a random installation ID and access token. Nothing about you is sent to do this. To prevent abuse, the service uses a one-way hash of your IP address and browser user agent as a rate-limit key; the hash is not stored.
• What we keep. For each installation we store the installation ID, a hash of its token, a random Composio user ID, when it was created and last seen, and, if you sign in, your account user ID.
• What Composio receives. Composio sees only a random pseudonymous user ID, never your licence key, name or sign-in identity. When you connect an app, you sign in to that app through Composio, and Composio holds the resulting access under its privacy policy.
• When an agent uses a connected app. The request and the app's response (for example the email being sent, or the calendar entries being read) pass through our connection service to Composio and on to that app. We relay this content and do not store it.

If you use your own Composio account instead, the app talks to Composio directly and our service is not involved.

Pragma in Slack

If you add Pragma to a Slack workspace, what people say to Pragma there reaches your computer through a messaging service run by us on Cloudflare, and your companion's answer goes back through it.

• What it receives. Only messages that @mention Pragma in a channel, or are sent to it privately. It does not read other messages in your channels.
• How long a message is kept. A message waits for your computer for at most 24 hours (up to 500 at a time) and is deleted the moment your computer has it. We keep no copy and no history of what people write or of what the companion answers; answers pass through the service on their way to Slack.
• What we store. The workspace's ID and name, the Slack IDs of the people linked to a Pragma account, the workspace's Slack access token sealed with encryption, one-time link codes as hashes for 15 minutes, and, for 24 hours, a record of which conversation each message belonged to, so that answers can only go where Pragma was asked. All of it is deleted when Pragma is removed from the workspace or a person unlinks.
• Linking. Each person links their own Pragma with a one-time code sent to them privately in Slack. Whoever enters the code receives that person's messages, so the code must never be shared.

Signing in

The app asks you to sign in with your email address, so your connected apps follow you to another computer. We email you a six-digit code, which works once and expires after 10 minutes; only a one-way hash of it is stored. Our connection service keeps your email address, an account ID, and which installations are signed in to it. Sign-in codes are sent from systo.ai@gmail.com, a Google Gmail account that our service sends through Composio.

While you are signed in, the app tells our connection service once a day that it was opened. We keep the date and nothing else, for 120 days, never what you did in the app. It is how the team sees which alpha testers still use Pragma, since alpha spots are limited.

Support reports

You can send us a support report from the app's settings. Nothing is sent unless you press send, and each attachment is optional. A report contains:

• your message, and your email address if you provide one so we can reply;
• the app version, your operating system and version, and processor architecture;
• your installation ID and, if you are signed in, your account user ID;
• if you attach it, a screenshot of the window or screen you pick;
• if you attach it, a screen recording of the window or screen you pick;
• if you attach it, a diagnostics file: app, Electron and Node versions, uptime, which settings are turned on (as on or off values and counts, not their contents), local model diagnostics, and the most recent part of the app's server log, with secrets such as keys and tokens automatically removed.

Screenshots and recordings can show anything that was on screen, so check what is visible before you attach them.

Reports are stored on Cloudflare. Attachments are deleted automatically after 90 days. The report itself, and a copy of any emails we send you about it, are kept so we can follow up and see the history of an issue; ask us and we will delete them. Only the Systo AI team can view reports, through a signed-in admin page. If you give an email address, we send a confirmation and our replies from systo.ai@gmail.com, a Google Gmail account that our support service sends through Composio, so both see your email address and our reply.

The community

The community at trypragma.xyz/community has its own sign-in: your email address and a six-digit code, sent by the same email service as the app's sign-in codes. It is separate from signing in to the app and cannot reach your connected apps.

• What we keep. Your email address, the name you choose, what you post (topics, replies, chat messages, private messages, images, room requests and a request to join the alpha), whether you claimed an alpha spot, who you have blocked, the reports you make, and when each of these happened.
• Who sees it. Anybody signed in to the community sees what is posted there and the name of the person who wrote each post. The chat rooms and the alpha lounge are seen only by alpha testers and the team. Your email address is shown only to the Systo AI team, and so are reports.
• Private messages. Alpha testers can message each other one to one. Only the two people in a conversation can read it. The team reads a private message only when one of the two reports it, and then only that message, not the rest of the conversation.
• Images. Only PNG and JPG images can be sent. Before an image is stored we remove the information cameras and editors add to the file, such as location, device and date. An image is shown only to the people who can see the message it was sent with.
• Emails. We email you sign-in codes, a note when you are let into the alpha, and a note if the team takes down a topic of yours. As an alpha tester you may get one reminder after 10 days without opening the app, and a note if your spot is given to somebody waiting.
• Alpha activity. The team sees, for each alpha tester, how many days in the last 14 and 30 the app was opened signed in with the same email address, from the daily note described under Signing in.
• Leaving. You can delete your community account from the community page. Your email address and name are removed and your private messages are taken down. What you published in topics and rooms stays under "Former member"; ask us and we will take those posts down too.

Usage analytics

To see how Pragma is used and who is testing it, the app sends a short list of named events to PostHog: the app being installed and opened, signing in, steps of the first-run setup, and actions such as creating a bot, sending a message, or creating or changing a channel. Each event carries the platform and, once you have signed in, your email address, so we can tell who is using Pragma.

• What is never sent. Your conversations, prompts, files, bot replies, anything you type, or a recording of your screen. The app does not record clicks, page views or sessions, whatever PostHog's own settings say.
• Turning it off. Settings, then General, then Usage analytics. When it is off the app does not contact PostHog at all, not even to say so.
• Where it goes. PostHog's United States cloud. Ask us and we will delete the events linked to your email address.

AI models and other services you connect

Pragma runs agents using tools and accounts you choose, such as the Claude, Codex or Gemini command-line tools, OpenAI, OpenRouter, xAI, MiniMax, ElevenLabs or AssemblyAI. When an agent uses one of them, your prompts, files and audio go directly from your computer to that provider, with your account or key, under that provider's own terms and privacy policy. Local models run entirely on your computer. We do not receive or store any of this traffic.

The app also downloads files it needs from public sources when you ask it to, such as local models from Hugging Face, runtimes from GitHub and Python packages, and loads team templates and app icons from public catalogs. These requests do not include your personal data.

This website

• Hosting. trypragma.xyz is hosted on Vercel, which processes standard request information such as IP address, browser and pages requested to serve and secure the site.
• Fonts. Pages load the Inter typeface from Google Fonts, so your browser contacts Google's servers.
• No tracking. The site uses no analytics, advertising pixels or tracking cookies, and the download page does not store your licence key in cookies or browser storage.
• The community. The community page keeps your community session in your browser's storage until you sign out. It is not used for tracking.

Who processes data for us

• Freemius: checkout, payments, tax, receipts, licence keys and refunds.
• Vercel: website hosting, licence checks and update checks.
• Cloudflare: licence records, the connection service, the Slack messaging service, support reports and the community.
• Slack: delivering messages to Pragma and Pragma's answers back, for workspaces that add Pragma.
• Composio: connected app access, and sending our sign-in, licence and support emails.
• GitHub: hosting installers and updates.
• PostHog: usage analytics from the app, which you can turn off.
• Google: sign-in, licence and support email (Gmail) and website fonts.

These providers may process data in countries other than your own, including the United States. Operational logs kept by our hosting providers are used only to run and secure the service.

How we use data

We use the information above only to deliver your purchase and licence, provide updates, run connected apps, answer support requests, prevent fraud and abuse, and meet legal obligations. We do not sell personal data or use it for advertising.

Your choices and rights

• Pragma asks you to sign in with your email address the first time it opens, so that your connected apps belong to your account. You can use it without connecting any apps and without ever sending a support report.
• You can ask us for a copy of the personal data we hold about you, or ask us to correct or delete it, by emailing systo.ai@gmail.com. We keep order records only as long as the law requires.
• Depending on where you live, you may have further rights, including to object to processing or to complain to your data protection authority.

Children

Pragma is not intended for children under 16, and we do not knowingly collect their data.

Changes to this policy

If what the app or website sends changes, we update this page and the date at the top.

Contact

Email systo.ai@gmail.com or message us on WhatsApp at +63 921 839 2963.