Privacy Policy

01Who

Who runs Bureau

Bureau is operated by Noord, Alkmaar, the Netherlands. For anything about your data, write to bureau@noord.vc. This policy covers the hosted Bureau service at bureau.noord.vc and its Mac, iPhone and web clients; the noord.dev website itself collects only the invitation email you choose to leave.

02What we store

What we store

• Your Google profile. When you sign in we receive your email address, name, profile picture and your Google Workspace domain. We request only the openid, email and profile scopes; we do not read your mail, calendar or files.
• Workspace content. Channels, messages, reactions, threads, uploaded files, link previews, agent definitions, agent runs and their tool calls, knowledge sources you add, tasks and notifications.
• AI provider keys. The Anthropic, OpenAI or xAI key an owner or admin adds is stored encrypted and is used only by that workspace’s agents. It never leaves the server and is never shown back in full.
• Connector tokens. If your workspace connects GitHub, Figma or a custom MCP server, the resulting tokens are stored encrypted for that workspace.
• Invitations and membership. Invited email addresses, roles, and who joined or was removed.
• Operational logs. Server logs with IP addresses, request paths and error details, kept for troubleshooting and abuse prevention. Push-notification tokens for the devices you sign in on.

We do not run advertising or third-party tracking inside Bureau.

03Where

Where it lives

All workspaces run on one server and one database hosted by Hetzner in Nuremberg, Germany (EU). Uploaded files live on the same host. Nightly encrypted backups are kept for 30 days. This is a single-region alpha: there is no data-residency choice and no redundancy across regions yet.

04Sub-processors

Who else processes it

• Hetzner Online GmbH (Germany): hosting and storage.
• The AI provider your workspace chose: Anthropic, OpenAI or xAI receive the messages, files and knowledge that agents are given when they run, under that provider’s API terms and using your own key.
• Google: sign-in (OpenID Connect). Google Drive and Gmail are not connected in the alpha.
• Apple: push notifications to iPhone and Mac clients (device tokens, notification text).
• GitHub, Figma or a custom MCP server: only if your workspace connects them, and only the requests agents make to them.

We do not sell data and we do not share workspace content with anyone else.

05Retention

How long we keep it

Workspace content is kept for as long as the workspace exists. Deleting a workspace removes it from the live database immediately and from backups within 30 days. Removing a member ends their access at once; their past messages stay in the workspace because they belong to it. Server logs are kept for at most 30 days.

Invitation emails left on noord.dev are kept until we invite you or you ask us to remove them.

06Export and deletion

Export, deletion, and your rights

A workspace owner can delete the whole workspace from Settings. For an export, email bureau@noord.vc from an owner account; we send a JSON export of the workspace within 7 days. A self-serve export is planned.

Under the GDPR you can ask us to access, correct, export or erase your personal data, or object to how it is processed. Write to bureau@noord.vc; we answer within 30 days. You may also complain to the Dutch data protection authority (Autoriteit Persoonsgegevens).

07Security

Security

Traffic is encrypted in transit (TLS). Provider keys and connector tokens are encrypted at rest with a key held only on the server. Access is scoped per workspace; members of one company cannot read another company’s data. If we learn of a breach affecting your workspace we will tell its owners without undue delay.

08Changes

Changes to this policy

We will update this page as Bureau grows; the date at the top shows the current version and we will email workspace owners about material changes. See also the Terms of Service. Questions: bureau@noord.vc.