Who runs this, and how you get out
Who
| Company | Pyfio UG (haftungsbeschränkt) |
|---|---|
| Address | Haferweg 30 b, 29614 Soltau, Germany |
| Register | Amtsgericht Lüneburg, HRB 213671 |
| Managing director | Andreas Tissen, sole |
| People | one |
| Investors | none |
| Contact | kontakt@pyfio.com |
The full legal version is in the Impressum, which is the one that binds.
What an agent can reach
An agent you connect gets one bullet of your outline, one you choose, to remember in, or none. Beyond that, a connector you approve starts with your whole outline; you choose read and write, or read only. A bullet you protect refuses every change from every agent.
For a narrower reach, hold a connector to one bullet with one press: open that bullet, open Agents and API keys in Settings, tap its row under Your agents, and press Let it reach only “…”, the bullet you are in. It then reads and writes that bullet and everything under it, and remembers there, even if you approved read only. It reaches nothing else in your outline, and its row says so. An agent you create there with "Let it read and write this outline" and "Give it a bullet of its own to remember in" both unticked reaches nothing until you give it a bullet the same way. Its key goes in a Bearer header, which clients such as Claude Code, Codex or Cursor send. ChatGPT cannot send a key. The Claude apps can send one only through the Request headers setting of a custom connector, which Anthropic calls a beta for a limited set of organizations; an administrator enters the key there, and that one key then serves every member of the organization.
Every key is listed under Agents and API keys in the app, with what it is and whether it has been used, and any of them can be revoked in one press. Revoking is immediate: the key stops working on the next request.
When an agent writes, its chip pulses in your top bar and the bullet appears on your screen. Nothing is written invisibly.
Your outline is never sent to a model by us
There is no call to any model API anywhere in Pando's code. Not OpenAI, not Anthropic, not Google, not anybody. Pando has no AI sub-processor.
The only model that ever sees your outline is the one you connected, with a key you issued and can take back. When Claude reads a branch, it is Claude reading it under your own subscription, not us sending it anywhere.
This is checkable rather than promised: search the source for any model endpoint and there is nothing to find. It is also why Pando does not meter agent calls and does not sell AI credits. We do not pay for the tokens, so there is nothing to resell.
Which companies touch your data
These are every outbound service the software talks to. The Datenschutzerklärung says what each one receives and for how long.
| Cloudflare | hosting, the database, file storage, mail routing |
|---|---|
| sign-in, and calendar or Drive only if you connect them | |
| Stripe | payment, only if you ever buy something |
| Resend | the emails Pando sends you |
| Dropbox | backups, only if you connect it |
What we will not claim
Pando is not EU-hosted and is not beyond the reach of the US CLOUD Act. It runs on Cloudflare, Inc. of San Francisco, on a worldwide network. The Datenschutzerklärung has said so from the beginning and this page is not going to say otherwise.
What is true: the company is German, the contract is under German law with a German venue, and no model ever sees your outline unless you connected it. If your requirement is that no American company is involved at any layer, Pando does not meet it, and it is better that you read that here than find it later.
How you get out
At any time, without asking anybody, without a support ticket, and without a notice period:
- Markdown or OPML, any branch or the whole outline.
- A spreadsheet or formatted text, for anything you want to paste somewhere else.
- A backup of the entire account, in one file.
- Delete the account, and every bullet, share, agent and backup goes with it. The same address can start again from nothing.
None of those formats needs Pando to be readable. OPML opens in Workflowy, Dynalist and most outliners; Markdown opens in anything. That is the point of them.
The honest part about one person
Pando is built and run by one person. That has real consequences and pretending otherwise would be the first thing to distrust.
A support reply can take a day. A bug on a Friday can wait until Saturday. And nobody can promise you that a one-person company will still be here in five years, so this page does not.
What can be said instead is what is already built: the export above is not a feature request, it works today, it takes one gesture, and what it produces is plain text that outlives any company. If Pando ever stops, the thing you lose is the software, not the writing.
Impressum · Datenschutz · AGB · What an agent can do · Connect an agent