shareable.

Great work.Carry it forward.

Share decisions, code, and next steps between your team’s AI assistants. Shareable connects them through one remote MCP server.

Share decisions
Sync code
Continue in context
shareable.

Shareable

Privacy Policy

Last updated

This policy explains how information is handled when you visit shareable.cc, join the waitlist, connect an AI assistant, or use the Shareable dashboard.

Who operates Shareable

Shareable is operated by SGRLabs.com, Chile. For privacy questions and requests, contact contact@shareable.cc.

SGRLabs.com is responsible for information used to run the website, manage the waitlist, authenticate users, and protect the service. When your organization supplies work content, it determines what is shared and with whom; Shareable processes that content to provide the service. Contact your organization as well for requests concerning its workplace records.

Information we process

  • Waitlist: work email, organization name, team size, an optional name and use case, submission dates, and review status.
  • Accounts and teams: names, email addresses, organizations, cells, roles, invitations, and access requests.
  • Handoffs: the content, titles, summaries, request replies, recipients, timestamps, read state, and other metadata that you or your organization submit.
  • Authentication and encryption: sign-in flow records, hashed verification and session values, OAuth authorization records, public keys, and encrypted copies of personal private keys. Unlocked personal private keys remain in browser memory.
  • Security and operations: request and device information handled by the hosting provider, service errors, and abuse-prevention counters. The waitlist application stores a keyed hash of the IP address rather than the raw IP. Infrastructure providers may still process the originating IP.
  • Communications: information you send when contacting us for support or privacy requests.

Please do not put passwords, API tokens, credentials, or other secrets in shares, titles, request replies, or waitlist messages.

Why we use information

We use information to review access requests, onboard organizations, authenticate users, route handoffs, enforce team permissions, send necessary service emails, respond to requests, and prevent abuse. We do not sell personal information or use the content of shares for advertising.

When consent is required, we ask for it for the relevant purpose. You may withdraw consent by contacting us; withdrawal does not affect processing already lawfully carried out. Where applicable law recognizes these grounds, necessary service processing may also rely on performing an agreement, protecting the service and its users, or meeting legal obligations. A customer organization is responsible for the lawful basis of the workplace content it submits.

Who can receive information, including AI clients

Information is available to the authorized participants in a handoff under the service's organization, cell, and recipient permissions. Administrators manage membership and access; an administrative role does not by itself make every private handoff readable.

AI-readable shares can be retrieved by authorized AI assistants and shown in the dashboard. The service can decrypt their stored bodies to deliver them. Your chosen assistant provider may process retrieved content under its own terms and privacy settings.

Private shares created in the dashboard are encrypted in the browser before upload. Private shares created through MCP pass through the assistant and the server in plaintext during creation and are then stored as an encrypted envelope. Stored private content is opened with a participant's personal key in the dashboard, not returned as content through MCP. Titles, request replies, and account metadata remain visible to the service; AI-readable summaries are also not end-to-end encrypted.

Shareable does not operate its own AI model. Connecting an AI client does not make that provider part of Shareable; its independent policies still apply.

Service providers and international processing

Shareable uses Cloudflare for hosting, network security, databases, object storage, authorization storage, and Turnstile verification. Transactional emails may be sent using Resend or a Cloudflare email service. These providers process information needed for their functions.

The operator is in Chile. Provider infrastructure and your chosen AI clients may process information in other countries. Shareable does not promise storage in a particular country. Where applicable law requires safeguards for a transfer, the relevant transfer must be covered by an appropriate legal mechanism.

Information may also be disclosed when required by applicable law or when necessary to investigate abuse, protect rights, or respond to a valid legal request. We do not publish your handoffs as public website content.

Cookies and browser storage

The public landing does not include an advertising tracker or a behavioral analytics script. Cloudflare may process security signals, including through Turnstile when the waitlist is opened. Fonts are served from Shareable rather than an external font service.

The dashboard uses the essential session cookie __Host-shareable_app (12 hours). Pending sign-in cookies __Host-shareable_app_login and __Host-shareable_login support short-lived sign-in and activation flows (30 minutes). Authentication cookies use Secure, HttpOnly, and SameSite protections. The dashboard also uses session storage for interface preferences, such as dismissing a key-setup reminder.

You can control cookies in your browser. Blocking essential cookies can prevent sign-in or other requested functionality.

How long information is retained

  • Shares: expire 30 days after creation; scheduled cleanup removes expired records and stored bodies. Senders can delete earlier. Expiry is not a promise that an independent recipient or AI provider deletes a copy it already received.
  • Dashboard sessions: expire after 12 hours; expired session records are cleaned up by a scheduled job.
  • Sign-in flows: expire after 30 minutes and are removed during scheduled cleanup.
  • Invitations: activation links are valid for 7 days; expired invitation records are later marked revoked.
  • Accounts, organizations, memberships, encryption-key records, and waitlist entries: remain while needed to operate the account, organization, or access request. Waitlist entries do not currently have an automatic expiry. Contact us to request deletion.
  • Operational records: security counters are periodically cleaned up. Provider logs, email-delivery records, and support correspondence may have separate retention needed for their purposes and applicable legal requirements.

Deletion may be limited by an applicable legal obligation or by the rights of others; we will explain any restriction relevant to your request. Removing an account or share cannot recall information already copied outside Shareable.

Security and encryption limitations

Connections use HTTPS. New share bodies are encrypted before storage, and private shares support personal-key encryption. Some older records may remain in their original form until migration or expiry. Encryption does not cover every field, and no system can guarantee absolute security.

Keep your email account, devices, passkeys, passphrase, and recovery code secure. Losing all methods for unlocking a personal key can make existing private shares unreadable.

Your choices and privacy rights

Write to contact@shareable.cc to request access to or correction of your personal information, deletion or blocking where available, withdrawal of consent, or an explanation of processing. Depending on the law that applies, you may also have rights to object, restrict processing, receive a portable copy, or complain to the competent authority. We may need to verify your identity before acting and will respond within the time required by applicable law.

For organization-controlled workplace content, contact your organization too. The sender can delete a handoff through the service. Contact us for account or waitlist removal; this policy does not imply that a self-service account-deletion control exists.

Shareable is a work collaboration service and is not directed to children. Do not submit children's personal information unless you have a lawful, authorized reason to do so.

Updates and applicable rules

This policy is read with applicable Chilean data-protection law, including Law No. 19,628 and its applicable amendments, and any mandatory protections that apply to you. It does not waive those rights or claim a regulatory certification.

We will date material updates here and, when appropriate, notify affected users through the service or a service email. For service-use rules, read the Terms of Service. Contact: contact@shareable.cc.