Legal
Privacy Policy
Last updated: July 19, 2026
This Privacy Policy describes how Sublime ("Sublime," "we," "us," or "our") collects, uses, shares, and protects information when you use our website at trysublime.io and the Sublime application (together, the "Service"). By using the Service you agree to the practices described here. If you do not agree, please do not use the Service.
01Information we collect
Account information
When you create a Sublime account we collect your name, email address, and authentication credentials. If you sign in through a third-party identity provider, we receive the profile information that provider shares with us (such as your name, email address, and avatar). If you subscribe to a paid plan, our payment processor (Stripe) collects your billing details; we receive limited billing metadata (such as plan, subscription status, and the last four digits of your card) but never store full payment card numbers.
Connected tool data
Sublime works by connecting to the tools your team already uses, for example GitHub, Slack, Google Workspace, CRMs, and project management platforms. Each connection is established only after you explicitly authorize it through the provider's OAuth flow, and the access token is scoped to the permissions that provider grants. We access connected-tool content (such as messages, files, issues, and records) only to the extent needed to run the agents and workflows you configure, and to build the workspace context those agents rely on. You can revoke any connection at any time from your settings, which stops further access immediately.
Agent and workflow data
When you create and run agents or workflows, we store their configuration, inputs, outputs, and run logs. Run logs exist so you can inspect what an agent did and why. They are part of the product, and are retained under the same rules as the rest of your workspace data.
Usage and device data
We automatically collect information about how you use the Service, such as pages visited, features used, agent run activity, and error events, along with technical data like IP address, browser type, operating system, and timestamps. We use this to keep the Service secure and reliable, debug problems, and understand which features matter.
Communications
If you contact us (for example at hello@trysublime.io), we keep the correspondence and any information you choose to include so we can respond and improve support.
02How we use your information
- Provide, operate, maintain, and improve the Service
- Run the agents and workflows you configure, including AI-powered processing
- Authenticate you and secure your account
- Process subscriptions, payments, and billing
- Send technical notices, security alerts, and support or administrative messages
- Respond to your inquiries and provide customer support
- Monitor for, prevent, and investigate fraud, abuse, and security incidents
- Analyze usage in aggregate to guide product decisions
- Comply with legal obligations
Where laws such as the GDPR apply, we process personal data on the legal bases of performance of our contract with you, our legitimate interests (such as securing and improving the Service), your consent (which you may withdraw at any time), and compliance with legal obligations.
03AI processing
Sublime uses third-party AI model providers (such as Anthropic) to power agents, workflows, and insights. Content, including relevant connected-tool data, is sent to these providers only as needed to fulfill the work you ask Sublime to do, over encrypted connections.
- We do not use your data to train our own models.
- Our AI providers are contractually restricted from using your data to train theirs.
- Agent outputs are stored in your workspace with run logs, so you can always see what was produced and from which inputs.
06Data security
We use industry-standard safeguards to protect your information, including:
- Encryption in transit (TLS) and at rest
- Application-level AES-256-GCM encryption for retained knowledge and stored secrets
- Scoped, revocable OAuth access to connected tools. We never ask for your passwords to those tools
- Access controls and least-privilege practices limiting who and what can read your data
- Isolation between customer workspaces
- Logging and monitoring for suspicious activity
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a breach affecting your personal data, we will notify you and the relevant authorities as required by applicable law. To report a security vulnerability, contact us at hello@trysublime.io.
07Data retention
We retain your information for as long as your account is active or as needed to provide the Service:
- Account data is kept while your account exists and deleted within a reasonable period after account deletion.
- Connected-tool data credentials and live access are deleted when you disconnect that tool. By default, redacted business context already learned from the connection remains as encrypted workspace knowledge until you delete it or the workspace.
- Run logs and workspace content may have large operational transcripts pruned on a schedule, but useful completed outcomes are promoted into encrypted retained knowledge first. Workspace-retained knowledge remains until it is deleted or the workspace is deleted.
- Billing records may be retained longer where tax, accounting, or other laws require it.
08Your rights and choices
Depending on where you live, you may have some or all of the following rights over your personal data:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your data ("right to be forgotten")
- Export your data in a portable format
- Restrict or object to certain processing
- Withdraw consent where processing is based on consent
- Not be discriminated against for exercising these rights
You can exercise many of these directly in the product: updating your profile, exporting or deleting retained knowledge, disconnecting tools, or deleting your account from settings. For anything else, email us at hello@trysublime.io and we will respond within the timeframe required by applicable law. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.
09International data transfers
Sublime is operated from the United States, and our service providers may process data in the United States and other countries. Where we transfer personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses with our providers.
10Children’s privacy
The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us at hello@trysublime.io and we will delete it.
11Third-party services
Sublime integrates with third-party platforms you choose to connect, and the Service may link to third-party sites. This policy does not cover the privacy practices of those third parties; please review their policies directly. Your use of a connected tool remains governed by your agreement with that provider.
12Changes to this policy
We may update this privacy policy from time to time. We will post the new policy on this page and update the "Last updated" date above. For material changes, we will give you additional notice by email or in the product before the changes take effect. Continued use of the Service after changes take effect means you accept the updated policy.
13Contact us
If you have questions about this Privacy Policy or how we handle your data, contact us at hello@trysublime.io, or reach us through our contact page.