Signing in
You sign in with Google or GitHub. Gatherd keeps the link to that account and none of its tokens: nothing it holds could act on your Google or GitHub account. Your account has no password to leak. The one exception is a single reviewer account, which the connector directories listing Gatherd use to check it. It signs in with a password, can reach only a demo workspace of made-up products, and is switched off if Gatherd leaves those directories.
Agent tokens
- A token is shown once, when it is issued, and Gatherd keeps only its SHA-256 hash.
- It belongs to one agent of one workspace, reads or reads and writes, and can be limited to some products.
- Revoking a token, or its agent, stops it on its next call.
- Each token is held to 120 calls a minute, and a workspace to its plan's calls a day.
Connected apps
When you connect an agent through MCPCloud, you approve it on Gatherd's own consent screen and choose the agent it works as. The connection uses OAuth with PKCE; Gatherd keeps only hashes of the tokens it issues, an access token lasts an hour, and each refresh token works once. Disconnecting it from the agents page, from MCPCloud or by deleting your account deletes its tokens.
Where your data lives
Your workspace, its tickets and the logs are in Convex. The app and your files run on Cloudflare, and a file is fetched through an address signed when you open it, never one stored in a ticket. Payments go through Stripe, and invitations are mailed through ZeptoMail with no open or click tracking.
What is logged
Every API call is logged with what it asked and what it was answered, and the app it said it was, for 30 days, so you can see what an agent did. A key that makes a repeated create safe is kept for 24 hours.
GitHub and webhooks
The GitHub App has read-only access to the pull requests, issues and metadata of the repositories you install it on, and writes nothing back to GitHub. Gatherd trusts a delivery from GitHub only by its signature. Outbound webhooks are signed with HMAC-SHA256 under a secret shown once, so your endpoint can tell a real delivery from a forged one.
Your work stays yours
Gatherd sends your tickets to no AI service and uses none of them to train anything. They leave Gatherd only for the places you send them: an agent you connect, a webhook you add, an export you download.
Leaving
Export a workspace as JSON and markdown at any time. Delete your account from Account after signing in again; a workspace you are alone in is deleted with it, every row and every file. The privacy page has the detail, and security questions go to support@gatherd.dev.