Privacy

Who is responsible

Restless is operated by Yao Ke, ABN 42 694 683 694, of 11 Muscat Grove, Glenwood NSW 2768, Australia. For privacy questions, requests, or complaints, email [email protected].

The public website

The public Restless website does not ask you to create an account. The only information it asks for is the optional private-beta waitlist described below. It does not use cookies or advertising trackers. Cloudflare, which hosts the site, counts page views with its cookieless Web Analytics; it does not identify you or follow you to other sites. If that changes, this notice will change with it.

Live cursors and the star count

While the homepage is open, it shows the pointers of other people viewing it at the same moment. To do that, your browser shares your pointer position on the page with our server, which passes it to the other visitors as an anonymous “Lighthouse keeper” with a random number. Positions are not stored, are not linked to any other information, and stop being shared when you close the page. If you prefer, turn on reduced motion in your device settings and the page will not connect.

To show how many people have starred the open-source project, the site’s server asks GitHub’s public API for the count and shares one cached answer with every visitor. Your browser does not contact GitHub for it, and nothing about you is sent to GitHub.

The private-beta waitlist

If you join the waitlist, you give us your email address and, if you choose, a short note about what you would run with Restless. We use them only to reply to you about the private beta.

The website does not store a waitlist submission. It is sent as one email to the operator through an email delivery provider, and it then lives in the operator’s mailbox. We keep it until it is no longer needed for the beta or you ask us to delete it, and we do not sell it or add it to a marketing list without asking you. To be removed, email [email protected].

Using the hosted product

If you use a hosted Restless service, we handle the information required to provide it. That can include account and organisation details, authentication records, the work and files you give the system, instructions and feedback, generated artifacts, operational logs, permission decisions, and receipts for actions taken through the service.

Each company workspace also sends Restless a small status summary so your account can show what needs you. It contains only counts, times and status flags, such as how many decisions are waiting, when work last moved, and whether a backup is current. It never contains titles, messages, file names, the names of the people involved, or the content of the work. We use it to show you your companies in one place, to notify you that one needs you, and to meter and bill the service. You can turn it off for any company; that company then shows only whether it is running.

Workspaces may contain information about other people. Only provide information you are authorised to use, and grant agents the narrowest access appropriate to the work.

Why information is used

We use information to operate the service, preserve work across sessions, apply access and budget controls, return evidence with completed work, diagnose failures, protect the service, answer support requests, and meet legal obligations. We do not sell personal information or use workspace content to target advertising.

Service providers

Restless may rely on infrastructure, model, storage, security, and communication providers to deliver the service. Depending on the model and route selected by you or your organisation, model inputs and related output may be processed by providers such as OpenAI, Anthropic, GLM-family model providers, or OpenRouter and the model provider it routes to. Restless does not send each request to every listed provider.

These providers receive the information needed to perform the selected function and are subject to the terms and safeguards applicable to the account used. An organisation may also connect providers of its choice; information sent through those connections is governed by that provider’s terms and the organisation’s instructions.

Some providers process information outside Australia. Likely locations include the United States and other countries where the selected provider or its subprocessors operate; available processing locations can change with the selected model, customer configuration, and provider. The provider, route, and any available regional controls should be confirmed before sensitive or regulated information is submitted. Where Australian privacy law applies, Restless takes reasonable steps required for overseas disclosures and remains accountable as required by law.

Retention and deletion

Information is retained while it is needed to provide the service, maintain security and audit records, resolve disputes, or meet legal requirements. Different records have different lifetimes: a workspace artifact, an authentication log, and an external-effect receipt do not serve the same purpose. Where deletion is available, backups and security records may take additional time to expire.

Security

Restless is designed around scoped authority, isolated company runtimes, explicit handling of consequential effects, and durable receipts. No technical system is perfectly secure. Keep credentials private, review the capabilities granted to workers, and report suspected unauthorised access through the verified channel used to provide your account.

Suspected data breaches are assessed and contained. Where the Notifiable Data Breaches scheme or another applicable law requires it, Restless will notify affected people and the relevant regulator.

Your choices

Depending on where you live, you may have rights to access, correct, export, object to, restrict, or delete personal information. You can make a request or privacy complaint through the verified support or account channel through which Restless access was provided. We may need to verify identity before acting on a request. We will acknowledge and respond within a reasonable time and explain how to escalate an unresolved Australian privacy complaint to the Office of the Australian Information Commissioner.

Contact and security reports

The only form on the public website is the private-beta waitlist. Privacy requests and complaints can be sent to [email protected] or sent by post to Yao Ke, 11 Muscat Grove, Glenwood NSW 2768, Australia. Hosted customers may also use their verified support or account channel. Suspected vulnerabilities in the open core can be reported privately through GitHub’s security advisory channel. Do not place personal information, credentials, or production data in a public issue.

Changes

Material changes will be reflected on this page with a new effective date. This notice describes Restless; connected services and websites linked from Restless publish their own privacy terms.