Effective 7 October 2026
ViewScale is operated by InCodeWeSpeak®, a sole proprietorship based in California, United States ("we", "us"). This policy says what ViewScale collects, why, who it goes to, how long it is kept, and what you can ask of us. Questions and requests go to support@view-scale.com.
Your account. Your email address and name; how you sign in (an emailed code, a passkey, Google, Microsoft or your Space's own single sign-on); for a passkey, its public key and label; for Google or Microsoft, the account identifier, email and name they return. We never receive your Google or Microsoft password.
Your Spaces. The Spaces you belong to and your role in each; the Groups, Segments, Policies, Scripts, notes and instructions people in a Space write; join codes; API keys (stored only as a hash).
Sign-ins. For each signed-in session: the IP address and country it came from, the browser's user agent, when it started, was last used, and ends. Sign-in codes and tokens are stored only as hashes.
Machines. For each computer joined to a Space: its name and host name, operating system and version, processor architecture, the ViewScale version it runs, its public keys, the public IP address it connects from and the local IP addresses of its network interfaces, whether it is online, and when it was last seen. The IP addresses are cleared when the Machine is removed.
The activity record. Each change made in a Space — through the web app, an API key, the Bridge or an agent — is recorded with the time, who made it, their IP address and country, what was asked and how it ended. A request's body is kept up to 4,000 characters, with secrets and codes withheld; an agent's tool call is kept as the tool, the Machine and the argument names only, never a command, a chat line or a file's contents.
Billing. When a Space is on a paid plan, Stripe handles the payment. Stripe collects your card and billing details on its own page; we receive and keep only Stripe's customer and subscription identifiers and the plan's status. We never see or store card numbers.
Email. We send sign-in codes and invitations to the address they are for.
The contents of a session on a computer — its screen, keystrokes and clicks, sound, clipboard, chat, file names and contents, commands and their output, and tunnel traffic — are encrypted end to end between your browser (or the ViewScale Bridge) and that computer. Our servers pass them along and cannot read them, and nothing of them is stored on our side. The one exception is an AI agent that a Space's Policy lets work without encryption: what that agent sends and receives passes through our servers readable, and is still not stored.
Each computer keeps its own log of who connected and what they did there — including the first 500 characters of each chat line and 300 of each command — in its ViewScale folder, which only its administrators can read. It stays on that computer, is capped at about 10 MB, and is deleted when ViewScale is uninstalled. No one, including us, can retrieve it remotely.
For people in the EU and UK, our legal bases are performing our contract with you, our legitimate interest in running and securing the service, and our legal obligations.
Each provider handles data under its own terms and privacy policy. We do not sell or share personal information as the California Consumer Privacy Act defines those terms.
ViewScale sets only the cookies it needs to keep you signed in to each Space and to finish a Google or Microsoft sign-in. It stores a few preferences in your browser — the last Space you used, list sizes, file transfer speed, touch mode, which instructions you have acknowledged — and the public keys of the computers you have connected to, so it can tell if one changes. There are no analytics, advertising or tracking cookies.
You can ask us to tell you what we hold about you, give you a copy, correct it, or delete it, by writing to support@view-scale.com. We will verify the request comes from you and answer within 30 days. Some of it you can do yourself: your name in your profile, your sessions and passkeys, and, as a Space's owner, its members, Machines and the Space itself.
California residents have the rights to know, delete, correct and limit the use of their personal information, and not to be treated differently for using them. We do not sell or share personal information and do not use sensitive personal information beyond what the service needs.
EU and UK residents also have the rights to restrict or object to processing, to data portability, and to complain to their data protection authority.
ViewScale runs on Cloudflare's global network, so your information may be processed in the United States and in other countries where Cloudflare and our other providers operate.
Connections are encrypted in transit; session contents are encrypted end to end; sign-in codes, tokens and API keys are stored as hashes; and access inside a Space is limited by role and Policy. No system is perfectly secure, and we will tell affected users of a breach as the law requires.
ViewScale is not for children under 16, and we do not knowingly collect their information.
We will post changes here and update the date above. If a change is significant, we will also tell account holders by email.