Privacy Policy

Last updated: July 18, 2026

fakeserver.net is run by Pat Albert in Palm Desert, California. This page explains, in plain English, what information we handle and what we do with it. The short version: we collect what's needed to run the service for you, we don't sell it, and your work belongs to you.

What we collect

Account basics: your email address, name if you give one, a securely hashed password, and your plan.
Your work: what you type into agents and what they produce ("runs") is stored in your account so you can come back to it. Team accounts share run history within the team.
Connection settings you choose to add: delivery email addresses, webhook addresses, and — if you connect them — your own mailbox or Vonage credentials. Passwords and API secrets for these are encrypted at rest and never displayed back, even to you.
Billing: payments are processed by Stripe. Your card number never touches our server; we keep only your Stripe customer reference and subscription status.
Technical basics: a login cookie so you stay signed in, and ordinary server logs (IP addresses, request times) used for security and troubleshooting.

How your work gets processed

When you run an agent, the text you provide is sent to Anthropic (the AI provider that powers our agents) to generate your result. We send what's needed to do the job — not your account credentials, not your billing details. Anthropic's handling of API data is governed by their own commitments at anthropic.com.

What we do with your information

Run the service: execute agents, deliver results where you've asked (your inbox, your webhook, your phone), manage your subscription.
Send service email: results you've asked for, receipts, account notices. No marketing lists you didn't join.
Keep the lights safe: prevent abuse, debug problems, enforce limits.

We do not sell your information. We do not run ads. We do not use your work to train AI models.

What we share, and with whom

Stripe for payments, Anthropic for AI processing, Vonage if you connect texting (using your own account), and your own mailbox provider if you connect one.
Destinations you configure: if you point deliveries at an email address, a webhook, or Zapier, your results go there because you sent them there.
Law: if we're legally required to disclose something, we will — and no more than required.

Your choices and rights

Update your delivery settings, disconnect a mailbox or phone connection, or revoke your API key anytime — disconnecting deletes those stored credentials.
Cancel anytime from your billing page; your account drops to the free plan.
Want your account and its data deleted? Email founders@fakeserver.net and we'll delete it. California residents: this also covers your CCPA rights to know and to delete.

Security

Passwords are hashed, connection credentials are encrypted with keys kept off the database, our own sending domain is authenticated (SPF, DKIM, DMARC), and internal systems aren't reachable from the destinations you configure. No system is perfect, but we build like it matters — because it does.

Kids

fakeserver is a business tool, not directed at children under 13, and we don't knowingly collect their information.

Changes

If this policy changes in a way that matters, we'll say so on this page with a new date — not bury it.

Questions

Email founders@fakeserver.net. A person answers — the same person who built this.