We log each call to learn what agents need: tool name, the job text you send, constraints, result IDs, timestamp, an anonymous random session ID, a coarse client class (for example "claude", "curl") or the client name you declare, and any agent_type or stage you declare.
We do not store IP addresses, raw user-agent strings, cookies or personal data. Please do not put personal data in job text, notes or tell_us answers.
Retention: raw call logs 90 days, then aggregates only. Outcome reports, tool card submissions and watchlists are kept until you delete them (delete_my_data). Raw logs are private and never sold. Public trends are thresholded (3 or more distinct sessions per item per day).
Health checks: our checker sends an MCP initialize and tools/list to public remote endpoints about every 1 to 3 days, identified by the user agent toolwork-healthcheck.