Privacy Policy
Last updated: October 2, 2026
1 Introduction
GCAP Labs, Inc. ("GCAP Labs", "we", "us", or "our") develops Headmaster, an AI agent app for your desktop, the web and the cloud, and operates this website at gcaplabs.com. This Privacy Policy describes how we handle information when you use the website or contact us.
Where your data goes depends on the mode you use. Cloud mode runs on a Headmaster-hosted runtime. Work mode runs on your own PC. The table below is the single source for this: the Security page and the docs show the same table.
| Data | Work mode (your PC) | Cloud mode (hosted runtime) |
|---|---|---|
| Prompts and replies | Handled on your PC, then sent to the model provider you choose (the Headmaster relay, ChatGPT, Claude or your own key). | Handled on your Headmaster Cloud runtime, then sent to the model provider you choose. |
| Files and documents | Stay on your PC unless a task passes their content to a model or a connected tool. | Held on your Cloud runtime. Their content is sent to a model or tool when a task needs it. |
| Memory | One memory per account, shared with Cloud, stored with your Headmaster account. | The same account memory, stored with your Headmaster account. |
| Provider API keys | Stored in the app on your PC. | Stored with your Headmaster account on our servers. You can replace or remove a key, but it is never shown again. |
| Account and usage details | Held by GCAP Labs: email, plan, usage counts. | Held by GCAP Labs: email, plan, usage counts. |
| Connected services (Telegram, Slack, email and others) | Each service receives the data a task sends it and applies its own policy. | Each service receives the data a task sends it and applies its own policy. |
2 Data we collect
2.1 Information you provide
- Contact details: name, email address, and organisation name when you submit the contact form or sign up for updates.
- Voluntary communications: support tickets, feedback, and survey responses.
2.2 Information collected automatically
- Website logs: IP address, browser type, page visits, and request metadata for security and diagnostics. We do not use this data for advertising.
- Error reports: crash or error information you choose to send us.
2.3 What we do not collect by default
In Work mode your prompts and files stay on your PC except where a task sends them to the model provider or connected service you chose. In Cloud mode they are processed on your hosted runtime, which GCAP Labs operates. We do not use them for advertising, we do not sell them, and we do not use them to train AI models.
3 How we use your data
We use the information we collect to respond to you, maintain the website, provide support, and improve Headmaster. We do not sell your personal data to third parties, and we do not use your Headmaster data to train AI models.
4 Model providers and your own API keys
Headmaster connects to model providers you choose (for example the Headmaster relay, ChatGPT, Claude, or a custom endpoint), with your own API keys where you add them. Those providers process your prompts according to their own privacy policies. We recommend reviewing each provider's policy before enabling it in Headmaster.
5 Data retention
We retain contact and support data for as long as necessary to respond to you and comply with legal obligations. Work mode data on your device is under your control and you can delete it from the application settings. For Cloud mode data and account details, email us to ask for deletion.
6 Your rights
Depending on your location, you may have the right to access, correct, delete, or restrict processing of the personal data we hold. To exercise these rights, email us at privacy@gcaplabs.com.
7 Security
We use reasonable technical and organisational measures to protect data sent to us through the website. In Work mode your workspace data is also protected by your own operating system and disk encryption; in Cloud mode it sits on the hosted runtime. For more details, see our Security page.
8 Changes to this policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page when we do.
9 Contact us
For questions about this Privacy Policy or our data practices, please contact us at privacy@gcaplabs.com.