Draft — pending legal review. Not yet a binding policy. This document describes our intended practices and may change before it takes effect.
Privacy policy
Last updated 14 July 2026
This policy explains what data Murable collects, why we collect it, and the choices you have. Murable provides cloud Linux desktops and a gateway API for AI agents. It is operated by Rawira LTD.
What we collect
Account information
Registration and sign-in run through Logto, our identity service. When you create an account we store your username and email address, and the authentication records Logto needs to sign you in.
Usage and metering
We record how your computers are used so we can meter runtime and operate the service — for example when a machine starts, stops or wakes, how long it runs, and basic resource figures. We do not sell this data.
Audit logs
We keep audit logs of security-relevant actions on your account and your computers (such as sign-ins, gateway key changes and machine lifecycle events) to help detect abuse and troubleshoot issues.
How we use it
- To provide and maintain the service, including booting, running and metering your computers.
- To authenticate you and keep your account secure.
- To meter usage and, once billing begins, to calculate charges.
- To detect, investigate and prevent abuse or violations of our acceptable use policy.
- To communicate with you about your account and material changes to the service.
Data processors
We rely on a small number of processors to run Murable. Content you place inside your computers (files, browser sessions, and anything your agent creates) lives on the infrastructure that hosts the machines.
- Logto (self-hosted) — identity and authentication. We run our own Logto instance rather than a third-party login provider.
- Our infrastructure providers — the compute and storage that run your cloud desktops and the panel.
Data retention
We keep account and usage data for as long as your account is active. Audit logs are kept for a limited period appropriate to their purpose. When you delete a computer, its associated data is removed; when you close your account, we delete or anonymise your data except where we need to retain records to meet a legal obligation.
Your rights
You can request access to the personal data we hold about you, ask us to correct it, or ask us to delete your account and associated data. To make a request, contact us using the address below and we will respond within a reasonable time.