wodlSign in

Privacy Policy

Last updated: March 3, 2026

1. What Wodl Is

Wodl is a self-hosted AI assistant interface. You bring your own API key from an AI provider (such as OpenAI, Anthropic, or others). Wodl connects that key to a chat interface with optional skills (tools) and memory.

2. Data We Store

  • Account credentials: Your email address and a bcrypt hash of your password. Your plaintext password is never stored.
  • API keys: The AI provider API key you enter is encrypted at rest using AES encryption before being saved to the database. It is decrypted only when making requests on your behalf.
  • Chat history: Messages you send and receive are stored in the database to provide conversation context.
  • Memory facts: Short facts your assistant learns about you (e.g. preferences, context) are stored at your direction and shown to you in Settings.
  • Skill configuration: Settings for built-in and custom skills you configure.

3. Data We Do Not Collect

  • We do not run third-party analytics or advertising trackers.
  • We do not sell your data.
  • We do not store your plaintext password or plaintext API keys.

4. Third-Party AI Providers

When you send a message, your message and conversation history are sent to the AI provider whose API key you have configured (e.g. OpenAI, Anthropic). Your use of that provider is subject to their own privacy policy and terms of service. Wodl does not control how those providers handle your data.

5. Data Deletion

You can delete your chat history and memory at any time from the Settings page. To delete your account and all associated data, contact us at the address below.

6. Security

API keys are encrypted at rest. Passwords are hashed with bcrypt. Sessions use signed JWT tokens. We apply security headers (HSTS, CSP, X-Frame-Options) on all responses.

7. Changes

We may update this policy from time to time. Material changes will be communicated by updating the date at the top of this page.

8. Contact

Questions about this policy? Reach out via the project repository or the contact details provided by the operator of this instance.