Privacy
How Towbar handles operator and deployment data.
Towbar stores account identity, repository installation metadata, desired
configuration snapshots, deployment history, logs, and encrypted credentials
needed to operate the installation. It does not sell personal data.
Secret values are encrypted in PostgreSQL. Normal responses show metadata only.
Recently authenticated Admins can explicitly reveal stored values in the dashboard;
API keys and MCP clients cannot use reveal endpoints. Execution services retrieve
the values needed to run authorized work. Secret responses disable caching, and
audit events record the action without recording the secret value.
The hosted documentation is published through Mintlify and links to GitHub and
the separately operated Towbar dashboard. Those services apply their own
privacy terms when you use them.
We use DataFast on the public website and documentation to understand page views,
referral sources, GitHub repository link clicks, and site usage. DataFast uses first-party cookies to recognize
visitors and sessions. See DataFast’s privacy policy
for more information.
Last modified on September 5, 2026
