Security
Where your data lives, and who can touch it.
Plain nouns, no adjectives. What we hold, what goes to other companies so the work can happen, what a Hand has to ask before doing, and how you leave. The legal version is the privacy page; for the long technical version, write to hello@tryhands.com.
A home of your own
Your Hands, your record and your conversations live in a home that belongs to your account: its own container on Cloudflare's network, a database nobody else shares, and a continuous encrypted backup in our storage.
What goes to others
What you ask, and whatever a Hand has to read to answer it, goes to the company running the AI model. That's true of any AI. Connected apps are reached through a service that holds the connection for us, with grants you can revoke. None of them may use your content for their own purposes.
Its own computer
A Hand works on a desktop in the cloud, with a browser and a shell, apart from your laptop. It only drives a computer of yours if you install the Mac app and turn that on. You can watch its screen and take the keyboard whenever you want.
It asks first
The card is the line.
Sending, spending, deleting, running a command, and anything a Hand judges to be a business decision arrive as a card: allow it, deny it, or answer in a sentence. The dial starts cautious, and you turn it up as a Hand earns it.
The server decides, not the Hand
A Hand can't widen its own reach with a clever argument. The server works out which business and which role the caller has from its identity, and a tool request can only narrow that.
One business can't see another
Every row in the record is stamped with the business it belongs to, and a request without one is refused rather than guessed at. Staff, memory, conversations and connected accounts all stop at that line.
Keys go in, never out
When a Hand needs a key or password, it asks with a card, and the secret goes into a store rather than the transcript. You can cap what a job or a business spends; at the cap, the work stops instead of carrying on.
The way out
Leaving is a button.
Export gives you contacts, deals and tasks as spreadsheets, notes as Markdown, and your conversations. Deleting your account removes the account, the machine your Hands ran on, its database and its backup, in one go.
What it doesn't do yet
- Two people can't work in the same business yet. One person, as many businesses as you like.
- Moving money is deliberately absent, and will stay that way. A Hand can draft an invoice or a chaser; it can't pay or transfer.
Questions
The ones that come up first.
Can a Hand read my files?
It reads what you give it: files you attach, folders and inboxes you connect. It works on its own computer in the cloud, not yours, unless you install the Mac app and turn that on.
What happens to my data if I stop paying?
Your records stay readable and exportable; your Hands stop spending. Export whenever you like, and delete the account when you want it gone.
Can a Hand spend money?
It spends credit on the work, which you can cap per job and per business. Moving money isn't in the product at all, and anything else with a cost arrives as a card for you to allow or deny.
Can one client see another?
No, and it's enforced in the data rather than hidden in the interface. Every row is stamped with the business it belongs to, and a request without one is refused rather than guessed at.
Do you train AI models on my work?
No. We don't, and the companies that process it for us aren't allowed to use it for their own purposes either. We don't sell it or advertise against it.
Start with something small.
Give a Hand one job and watch what it asks you. Plans start at $20 a month, with work included.
