Privacy
Last updated Oct 20, 2026. Plain English, no surprises.
The plugin
The Tune-Up plugin itself has no tracking. It goes online only to search public skill marketplaces when no local skill fits a job, and it saves nothing until you say add.
This website
We count visits with Vercel Web Analytics. It uses no cookies and shows us totals (pages, referrers, countries), not who you are. There is no cookie banner because there are no tracking cookies.
Ask Tune-Up
- Your questions go to our server and to an AI model (Claude, through OpenRouter) to write the answer. We don't keep the conversation. Don't share passwords, keys or personal details.
- Abuse protection: Cloudflare Turnstile checks that you're a person. We keep a one-way hash of your IP address for up to a day to rate-limit requests, and a daily count of how much the assistant was used.
- Messages to the team: only if you confirm "Send to the team", we keep your name, email and message so a person can reply. They are kept for up to 12 months, then deleted.
The free connector (private beta)
- What we keep: your email, which boxes you ticked and when, a one-way hash of your connector token, and how many checks you ran each day. Nothing else.
- Signing in from Claude, ChatGPT and similar apps: you sign in with a 6-digit code sent to your email. Supabase Auth (our sign-in provider) keeps your email, your sign-in sessions and which apps you connected, and issues the access those apps use. You can see and disconnect your apps, or delete everything, at viaknox.com/oauth/consent.
- Chats you check are processed in memory and thrown away. We never store or log chat text, your bot's instructions or reports; our logs hold only status codes.
- What leaves our server: a scrubbed copy of each chat, plus your bot's instructions (your bot sends them by default), goes to an AI judge (Jev by TypeSafe, through OpenRouter) on zero-data-retention, no-training providers. Before that, an automatic scrubber replaces these with placeholders like
[EMAIL_1]:- email addresses, phone numbers, card numbers, US Social Security numbers and IPv4 addresses;
- private keys, and API keys and tokens in common formats;
- values of settings named like a password, secret, API key or token, including web sign-in headers;
- any words you list as "never send".
- What the scrubber does not remove: names, street addresses, other ID numbers, and secrets that look like ordinary words, unless you list them as "never send". It is automatic and can miss things; please don't check chats that hold secrets you can't afford to share. The scrubber is open source, and every case it's tested against is in the tune-up repository. Found a gap? See our security policy.
- Hosted bots: if you use the connector from a hosted bot such as Grok Bot, that bot's provider sees the chat first, under its own terms.
- Email: we send the one-time link to get your connector, and a link can be sent at most 3 times a day. Product updates only if you tick that box on the confirm page (it is never pre-ticked); every update has an unsubscribe link.
- How long: sign-ups that never confirm are deleted after 7 days. Everything else stays until you delete it.
- Delete everything: at viaknox.com/api/tuneup/delete with your token, or, if you signed in from an app, at viaknox.com/oauth/consent. Lost your token? Use Ask Tune-Up on this site and choose "pass a message to the team" with the address you signed up with.
Who processes data for us
Vercel (hosting and analytics), Cloudflare (bot check), OpenRouter, Anthropic and TypeSafe (answers and the connector judge), Supabase (the knowledge base, rate limits, usage counts, connector sign-ups and app sign-in), Notion (our message inbox) and Resend (email). Each handles data under its own terms.
Your choices
To see, correct or delete a message you sent, use Ask Tune-Up and choose "pass a message to the team", or open an issue at github.com/viaknox/tune-up without personal details and we'll follow up.
Tune-Up is made by Viaknox Holding LLC.