Sleev is built so your code never has to leave your machine. This page summarizes what Sleev can and can’t see and how we protect the data we do handle. Our Privacy Policy and Data Processing Addendum (DPA) describe our commitments in full.
What Sleev sees
- Account and billing details, such as your email, name, organization, and plan.
- Usage metadata, such as request counts, token totals, models, and software versions.
- Diagnostic logs, only when you choose to upload them.
What Sleev never sees
- Your prompts, code, or file contents.
- Conversation history, model responses, or tool inputs and outputs.
- Your provider API keys.
- Your card details. Stripe processes payments.
The Sleev gateway runs on your device and listens on a loopback address (127.0.0.1) by default. It sends your requests directly to the AI provider or endpoint you configure, using your provider credentials locally. If you make the gateway reachable on a network, securing that network is up to you.
Hosted services
Sleev’s hosted services handle accounts, organizations, licensing, and billing.
- Encryption: The hosted API is served over HTTPS. Our managed databases and storage on Google Cloud are encrypted at rest.
- Access control: Account and organization data require authentication. Organization access is checked against membership and role.
- Internal access: Sleev’s internal systems require two-factor authentication.
- Providers: The service providers we use are listed in our Subprocessors Directory.
Diagnostics
Diagnostic logs exclude prompts, code, conversation history, model responses, tool content, and provider API keys. They are deleted within seven days.
Network connections
Besides the AI providers you configure, Sleev connects to these domains. If you’re behind a corporate proxy or firewall, allow them.
| Domain | Used for |
|---|---|
sleev.ai |
Browser sign-in and the installer |
api.sleev.ai |
Account, licensing, and usage sync |
api.workos.com |
Sign-in sessions |
storage.googleapis.com/sleeve-releases |
Software updates |
models.dev |
Model pricing for local usage analytics |
Machines that can’t reach these domains can use an offline license.
Reporting a vulnerability
If you believe you’ve found a security issue in Sleev, email support@sleev.ai with the details and steps to reproduce it. Please give us a chance to fix the issue before disclosing it publicly. Our security.txt lists the same contact.