Privacy

Ecko does not phone home. It has no telemetry, no analytics, no licence check and no update ping. It makes exactly the network requests your program asks it to make. Nothing about your code, your machine or your usage reaches us, because nothing is sent.

When your program calls ai against a real provider, that request goes to the provider you configured, directly. Without a key it runs in mock mode and makes no network request at all.

This site can use Google Analytics, if you accept it. It does not load until you choose Accept analytics. Until then, and if you choose Reject analytics, no script is fetched from googletagmanager.com and no analytics cookie is set. The choice is stored in this browser as localStorage on ecko.sh, not as a cookie. To change it later, clear this site's data for ecko.sh and reload.

If you accept, gtag.js records the page you viewed, roughly where in the world you are, and which site or search sent you. It sets cookies to recognise a return visit. We use it to see which pages are read and which are not. It is Google's product, not ours, and Google's privacy policy governs what they do with it.

A content blocker, or a browser with tracking protection on, will still block googletagmanager.com even after an accept. Nothing here depends on it.

The second third-party origin is Paddle, and only if you take it. Pressing a buy button loads Paddle's checkout script from cdn.paddle.com and opens their payment overlay. It is fetched at the moment you press the button rather than on page load, so it never runs unless you start a purchase. Inside the overlay you are dealing with Paddle, and their cookies and privacy notice apply there.

There is nothing else. No advertising, no embedded widgets, no webfonts fetched from anyone else. The typefaces are served from our own domain, and so are downloads. Those two origins are the complete list.

Payments are handled by Paddle, which acts as the merchant of record and is the seller on your invoice. Paddle collects your billing details and processes the payment. We never see or store your card details.

What reaches us is the record of the licence itself: the name and email on the account, the company it is for, the plan, and the payment status Paddle reports back. We use it to issue the licence, invoice it, renew it and support it. Nothing more.

We keep the email so we can reply and honour any agreement it leads to. We do not sell it, and we do not add you to a mailing list you did not ask for.

Paddle takes payment and manages subscriptions. Resend delivers our email. Cloudflare serves this site and the release downloads. That is the whole list. None of them receive anything about the programs you write, because the binary sends nothing.

Licence and support records last as long as the licence is active. Ask us to delete your account and personal data goes from our primary storage within 30 days and from backups within 90. Invoices and tax records are kept for up to seven years, because the law requires it.

You can ask for a copy of what we hold, have it corrected, have it deleted, or object to how we use it. Write to support@ecko.sh and we will answer within 30 days. If you are in the EU or UK, that address is also the data protection point of contact.

We do not sell your data, and we do not use it to train AI models.

Ecko is published by Machine Republic (Pty) Ltd. Support, billing and privacy questions go to support@ecko.sh. Licensing and enterprise enquiries go to sales@ecko.sh, and security reports to security@ecko.sh.