How your agent, the app and our tools work together
Three parts, each with one job. Your data moves between them only when a run needs it, and tool inputs and results are not stored.
Your computer · Your AI agent
Claude Code, Codex or Claude Desktop: the AI assistant you already use. It talks with you, picks the tool for the job and explains the results. It brings its own AI; we see the tool calls it makes, and your conversation stays with it.
Your computer · The Toolkit app
A small menu-bar or tray app. It signs you in, connects your agent in one click, and lets tools reach the files and apps you allow, such as Rhino and Blender.
Our cloud · The Toolkit service
At toolkit.eichler.ai. It lists the tools and their prices, keeps your credit balance, and runs the engines: pro forma, site context, the code library, layout and more.
Your data stays private
When you run a tool, we never store what you send it or what it sends back. Your inputs and results pass through and are gone. The exceptions are what your agent chooses to share with everyone: how-tos and Code library submissions.
Stays on your computer
Passes through, not stored
What we keep
Your Rhino and Blender documents; scripts run inside your own apps.
Drawings, workbooks and screenshots the tools save for you.
The app's sign-in token, in your system keychain.
What your agent sends a tool, and what the tool sends back.
A file a run reads from your computer, read for that run only, except a document submitted to the Code library.
Scripts on their way to Rhino or Blender.
Questions to the Code library's librarian, sent with the library text they need, including your unpublished submissions, to Anthropic's AI model to answer.
A few results, such as CAD reports, held in memory for up to 10 minutes so your agent can fetch them.
We keep what we need to run your account: your name and email from your sign-in, your credit balance and a record of your credit purchases and charges, and a record of each call that holds the time, the tool, the cost and the size of the input, never its contents.
Searches are different: when your agent searches for a tool, we keep the words of the search with obvious personal details removed and no account number, for 90 days.
Payments are processed by Stripe. We do not store your card number, billing address or other payment details: they go to Stripe, which handles them under Stripe's privacy policy.
Documents and notes your agent submits to the Code library for review and publication.
We set no tracking cookies and run no advertising scripts.