Privacy

Who is responsible

Restless is operated by Yao Ke, ABN 42 694 683 694, of 11 Muscat Grove, Glenwood NSW 2768, Australia. For privacy questions, requests, or complaints, email [email protected] or call 0466 587 477.

The public website

The public Restless website does not ask you to create an account, submit a form, or provide personal information. It does not currently load advertising trackers or third-party analytics. If that changes, this notice will change with it.

Using the hosted product

If you use a hosted Restless service, we handle the information required to provide it. That can include account and organisation details, authentication records, the work and files you give the system, instructions and feedback, generated artifacts, operational logs, permission decisions, and receipts for actions taken through the service.

Workspaces may contain information about other people. Only provide information you are authorised to use, and grant agents the narrowest access appropriate to the work.

Why information is used

We use information to operate the service, preserve work across sessions, apply access and budget controls, return evidence with completed work, diagnose failures, protect the service, answer support requests, and meet legal obligations. We do not sell personal information or use workspace content to target advertising.

Service providers

Restless may rely on infrastructure, model, storage, security, and communication providers to deliver the service. Depending on the model and route selected by you or your organisation, model inputs and related output may be processed by providers such as OpenAI, Anthropic, GLM-family model providers, or OpenRouter and the model provider it routes to. Restless does not send each request to every listed provider.

These providers receive the information needed to perform the selected function and are subject to the terms and safeguards applicable to the account used. An organisation may also connect providers of its choice; information sent through those connections is governed by that provider’s terms and the organisation’s instructions.

Some providers process information outside Australia. Likely locations include the United States and other countries where the selected provider or its subprocessors operate; available processing locations can change with the selected model, customer configuration, and provider. The provider, route, and any available regional controls should be confirmed before sensitive or regulated information is submitted. Where Australian privacy law applies, Restless takes reasonable steps required for overseas disclosures and remains accountable as required by law.

Retention and deletion

Information is retained while it is needed to provide the service, maintain security and audit records, resolve disputes, or meet legal requirements. Different records have different lifetimes: a workspace artifact, an authentication log, and an external-effect receipt do not serve the same purpose. Where deletion is available, backups and security records may take additional time to expire.

Security

Restless is designed around scoped authority, isolated company runtimes, explicit handling of consequential effects, and durable receipts. No technical system is perfectly secure. Keep credentials private, review the capabilities granted to workers, and report suspected unauthorised access through the verified channel used to provide your account.

Suspected data breaches are assessed and contained. Where the Notifiable Data Breaches scheme or another applicable law requires it, Restless will notify affected people and the relevant regulator.

Your choices

Depending on where you live, you may have rights to access, correct, export, object to, restrict, or delete personal information. You can make a request or privacy complaint through the verified support or account channel through which Restless access was provided. We may need to verify identity before acting on a request. We will acknowledge and respond within a reasonable time and explain how to escalate an unresolved Australian privacy complaint to the Office of the Australian Information Commissioner.

Contact and security reports

The public website does not collect form submissions. Privacy requests and complaints can be sent to [email protected], made by phone at 0466 587 477, or sent by post to Yao Ke, 11 Muscat Grove, Glenwood NSW 2768, Australia. Hosted customers may also use their verified support or account channel. Suspected vulnerabilities in the open core can be reported privately through GitHub’s security advisory channel. Do not place personal information, credentials, or production data in a public issue.

Changes

Material changes will be reflected on this page with a new effective date. This notice describes Restless; connected services and websites linked from Restless publish their own privacy terms.