# Privacy Policy

Patchwork OS / Claude IDE Bridge — Oolab Labs — Last updated: April 2026

Short version: Patchwork OS and Claude IDE Bridge run entirely on your own machine. When you connect Gmail, your email is read locally and never transmitted to Oolab Labs or any third party. Nothing leaves your machine without your explicit approval.

## 1. What Claude IDE Bridge is

Claude IDE Bridge is an open-source, self-hosted bridge server that connects Claude Code (Anthropic's CLI) to your local IDE (VS Code and compatible editors). It runs as a local process on your machine and communicates only with your IDE and your local Claude Code session.

## 2. Data we do not collect

Oolab Labs does not collect, receive, or have access to any of the following:

- Your source code, file contents, or project structure
- IDE state, diagnostics, or editor activity
- Terminal commands or their output
- Authentication tokens or credentials
- Usage statistics, telemetry, or analytics
- IP addresses, device identifiers, or any personally identifiable information

## 3. How data flows

All communication occurs locally on your machine via WebSocket or HTTP on `localhost`. Data may flow between:

- Your IDE extension and the bridge server (local WebSocket)
- Claude Code CLI and the bridge server (local WebSocket or stdio)
- Claude API calls initiated by Claude Code (governed by Anthropic's Privacy Policy)

When you use the optional `--bind 0.0.0.0` flag to expose the bridge on your network or the internet, traffic between the bridge and remote Claude Code clients travels over your own network. Oolab Labs has no visibility into this traffic.

## 4. Authentication tokens

The bridge generates a random authentication token stored in `~/.claude/ide/<port>.lock` on your local file system. This token is used only to authenticate connections to your bridge. It is never sent to or stored by Oolab Labs.

## 5. Gmail connector (Patchwork OS)

Patchwork OS can optionally connect to Gmail via OAuth 2.0. When you connect Gmail:

- Scope requested: `https://www.googleapis.com/auth/gmail.readonly` — read-only access to your email messages and metadata.
- What we do with it: Email content is read locally on your machine by the Patchwork OS process. Summaries or draft replies are written to `~/.patchwork/inbox/` on your machine only.
- What we never do: We do not forward email content to Oolab Labs servers. We do not send, delete, or modify emails unless you configure a recipe to do so and explicitly approve the action.
- Token storage: Your OAuth refresh token is stored at `~/.patchwork/tokens/gmail.json` with file permissions readable only by your user account (`0600`). It is never transmitted off your machine.
- Revoke anytime: You can disconnect Gmail from the Patchwork OS dashboard Connections page, or revoke access at myaccount.google.com/permissions.

Patchwork OS's use of Gmail data complies with the Google API Services User Data Policy, including the Limited Use requirements.

## 6. Third-party services

The bridge itself makes no outbound network requests beyond the connectors you explicitly configure. Any AI inference is performed by the model provider you configure using your own API key — Oolab Labs is not an intermediary. Use of the Claude API is subject to Anthropic's Privacy Policy.

## 7. Open source

Claude IDE Bridge is fully open source. You can inspect everything it does at github.com/Oolab-labs/claude-ide-bridge.

## 8. Changes to this policy

If this policy changes materially, the updated version will be published at this URL and the "Last updated" date above will be revised. Because no personal data is collected, changes are unlikely.

## 9. Contact

Questions about this policy: support@gigsecure.co.ke or open an issue at github.com/Oolab-labs/patchwork-os/issues.