Privacy

sick.cat keeps your workspaces on its own server, for as long as you chose. Sign-in, tokens and credits are Sykbot's (sykbot.com); GitHub sees only what you send it from Source Control. This page is about the one part of sick.cat that sends your work to other companies: Sick Copilot.

What Copilot sends, and to whom

When you send Copilot a message, the model you picked receives: your message; the workspace's map (each file's path and size, and the names its code defines); its rules file (VENICE.md, AGENTS.md or CLAUDE.md) and any file you pinned; the files and lines Copilot reads to answer; the output of commands it runs in your sandbox; the chat so far (or its summary); and the names of your secrets and variables. It never receives a secret's value: it is told only their names, and commands in the sandbox run without them. Its own tools never read a file that holds secrets (.env and the like, key files). A command could print one, since the sandbox has the workspace's files, so Copilot refuses a command that names a secrets file or prints the environment; and in Write mode, and in Auto unless you allow commands, a command runs only after you have read it and pressed Run. No filter catches every command: read one before you run it.

Depending on the model you pick, that goes to one of these companies:

• Anthropic — Claude models. Its privacy policy
• OpenAI — GPT models. Its privacy policy
• Google — Gemini models (the Gemini API). Its privacy policy
• Groq — fast hosting of open-weight models (gpt-oss, Qwen). Its privacy policy
• DeepSeek — DeepSeek models. Its privacy policy
• Cloudflare — Workers AI hosting of open-weight models (gpt-oss, Qwen, DeepSeek, GLM). Its privacy policy
• Venice AI (venice.ai) — hosting of open-weight and uncensored models, and Claude, GPT, Gemini, DeepSeek, Qwen, Kimi, GLM and Grok as well, whenever that is cheaper or another route is unavailable. Its privacy policy
• OpenRouter — a router to every model Copilot offers (Claude, GPT, Gemini and DeepSeek too, whenever that is cheaper or the maker's own route is unavailable, and Kimi, GLM, Qwen, Grok, MiniMax, Nemotron, Cohere and others): it passes each request to the company that serves that model — Anthropic, OpenAI, Google, DeepSeek, Moonshot AI, Z.ai, Alibaba Cloud, xAI, MiniMax, NVIDIA, Cohere, Cognitive Computations, or a host it chooses — under that company's own terms. Its privacy policy

Terms that differ

• Free Copilot runs only on providers' own free allowances. Google's free tier of the Gemini API may use what it receives to improve Google's products, and some free models on OpenRouter are served by companies that keep or learn from prompts. Use a paid model for anything you would not share that way.
• Your own key (Settings → Your AI keys): the request goes to that provider under your key and your agreement with them; sick.cat charges only its fee. Your key is stored sealed (AES-256-GCM), shown only by its last four characters, and never sent anywhere but that provider.
• Background jobs go through the provider's batch service: the request is processed asynchronously, kept by the provider until sick.cat collects the result, and for as long as that provider's policy says. Through OpenRouter, sick.cat deletes the batch (the request and its answer) as soon as it has read the result.
• Routing: sick.cat may serve a model through a different company than its maker (for example an open-weight model on Groq or Cloudflare) when that is cheaper or faster; the list above is every company that can receive a request.

What sick.cat keeps

Your chats are stored with the workspace they belong to, count toward its storage, and are deleted with it. sick.cat does not use them for anything but showing them to you and continuing the chat, and keeps no copy of what a provider answered beyond the chat itself. sick.cat's own logs never record a request's address or contents.