Documentation

Build with trust

Everything you need to install, verify, and understand agent skills. Security scanning, cryptographic signing, and full transparency.

This policy covers what data the Vett CLI and website ("Vett", operated by Vett Software Inc.) collect, why we collect it, and how to opt out. We keep it short because there isn't much to disclose.

Effective February 26, 2026

Information We Collect

A small set, minimal by design.

CLI Telemetry (opt-out)

When telemetry is enabled, the CLI sends the following on each command invocation:

deviceId
Random UUID, not tied to any account or identity
command
Command name (e.g. install, search)
duration
Execution time in milliseconds
success
Whether the command succeeded or failed
error
Error class name if failed (not the message)
cliVersion
Installed CLI version
os / arch / nodeVersion
Platform information

Website Analytics

We use PostHog for page view and feature usage analytics on the website. Skill download events are recorded to measure registry usage.

Cookies

PostHog sets a first-party analytics cookie to distinguish unique visitors and maintain session context. No third-party advertising or cross-site tracking cookies are used.

Enclave Waitlist Signups

If you join the Enclave waitlist, we store your email address so we can contact you about early access. We use a double opt-in flow: your spot is confirmed only after you verify your email address.

email
Used only for Enclave early-access communication
verification token hash + timestamps
Used to confirm email ownership; we store only a hash, not the raw token
source / path / UTM tags
Used to understand which pages and campaigns convert
Turnstile verification result
Used only for abuse prevention at submit time

Retention

We keep personal data only as long as needed.

Waitlist verification tokens expire after 24 hours and are invalidated immediately after successful verification.

Waitlist signup records are retained while we operate the Enclave early-access program, unless you request deletion earlier.

To remove your waitlist data, email privacy@vett.sh.

What We Don't Collect

We want to be explicit about this.

×Source code or file contents
×Skill content or instructions
×Filenames or directory structures
×Credentials, tokens, or API keys
×Names, phone numbers, or billing details
×Git history or repository metadata

How We Use It

Telemetry helps us build a better tool.

We use collected data to understand CLI version distribution across the user base, monitor error rates and fix bugs, track skill popularity to improve the registry, and make informed decisions about what to build next. For Enclave waitlist signups, we use your email only to verify ownership and communicate early-access availability. We do not sell data to third parties or share it for cross-context behavioral advertising.

Third-Party Services

Services that process data on our behalf.

PostHog—Analytics
AWS / Vercel—Hosting and compute
Cloudflare—DNS and object storage
Resend—Transactional email delivery for waitlist verification

Opting Out

CLI telemetry is entirely optional.

Disable CLI telemetry

Set telemetry.enabled: false in ~/.vett/config.json, or set the environment variable VETT_TELEMETRY_ENABLED=0.

When telemetry is disabled, the CLI sends zero network requests for analytics. No data is queued or sent later.

Opting out disables CLI usage telemetry only. It does not affect standard server-side logging, rate limiting, or abuse prevention — those are required to operate the service.

Your Rights

Depending on where you are, you may have rights under privacy legislation such as Canada's PIPEDA, the EU's GDPR, or California's CCPA — including the right to access, correct, or delete personal data we hold about you. Given that we collect minimal, largely anonymous data, there may be little to action, but we respect these rights regardless. Contact privacy@vett.sh and we'll respond within 30 days.

Contact

Questions about this policy? Email privacy@vett.sh.

Changes

We may update this policy as the product evolves. Continued use of the service after changes constitutes acceptance. For material changes, we'll make reasonable efforts to provide notice.