# Privacy Policy & Terms of Use - Chinwag

## 01 - Zero Source Retention

Chinwag is built around a simple privacy rule: **your source code stays in your Git repositories and in sandboxes on your own machines.** The Chinwag Blind Relay routes end-to-end encrypted (`HPKE`) coordination payloads and signed metadata headers. It holds no decryption keys and does not store plaintext source code.

## 02 - What chinwag.sh Collects

1. **Access & pack reservation requests.** When you submit your work email and organization details on `chinwag.sh`, we use them solely to provision your organization’s account and reply to your request.
2. **First-party telemetry only.** We do not load third-party ad networks, cross-site pixels, or data brokers.
3. **Organization billing & audit logs.** For enrolled organizations, we maintain credit ledger balances and signed, encrypted envelope receipts required to enforce your `chinwag.workflow.yaml` policy.

## 03 - Terms of Use & Apache 2.0 License

The `chinwag` command-line client and `chinwag-ci` runner are open source on [GitHub ↗](https://github.com/emunlabs/chinwag) under the [Apache License, Version 2.0](https://www.apache.org/licenses/LICENSE-2.0) (Section 3), including its express royalty-free patent grant covering Chinwag’s six patent-pending filings. [Read the docs →](https://docs.chinwag.sh). Hosted Blind Relay and Organization Credit Pool services are provided by Emun Labs, Inc. d/b/a Chinwag (Austin, Texas). Contact: `security@chinwag.sh`.