# Privacy Policy for DotAgents

## 📋 Privacy Policy Overview

**Effective Date**: August 14, 2025  
**Last Updated**: August 14, 2025

DotAgents is designed with privacy as a fundamental principle. This privacy policy explains how we collect, use, and protect your information.

## 🚫 **No Data Collection**

### Core Principle
DotAgents operates on a **zero-data-collection** principle. We do not collect, store, or transmit any personal information to external servers.

### What We Don't Collect
- **No Personal Information**: Names, emails, or identifying information
- **No Conversation Data**: Your conversations are never transmitted to our servers
- **No API Keys**: API keys are stored locally and never transmitted to us
- **No Usage Analytics**: No usage tracking or analytics collection
- **No Telemetry**: No system or usage telemetry

## 🔐 **Data Storage**

### Local-Only Storage
All data is stored **exclusively** on your local machine:
- **Conversations**: Stored in local files on your device
- **Settings**: Stored in local configuration files
- **API Keys**: Encrypted and stored locally using system keychain
- **MCP Server Configurations**: Stored in local JSON files

### No Cloud Sync
- **No External Storage**: No data is stored in cloud services
- **No Cross-Device Sync**: Data does not sync across devices
- **No Backup to External Services**: No automatic backups to external services

## 🏗️ **Technical Details**

### Data Locations
- **macOS**: `~/Library/Application Support/DotAgents/`
- **Windows**: `%APPDATA%/DotAgents/`
- **Linux**: `~/.config/DotAgents/`


### Encryption
- **API Keys**: Encrypted using system keychain/keyring
- **Sensitive Settings**: Encrypted using AES-256 encryption
- **File Permissions**: Config files have restricted file permissions

## 🔍 **Third-Party Services**

### API Providers
When you use DotAgents with external services (OpenAI, Groq, Gemini, etc.):
- **Direct Connection**: Your API calls go directly to the service provider
- **No Proxy**: We do not proxy or intercept your communications
- **Provider Policies**: Subject to the privacy policies of the respective providers

### MCP Servers
- **Local Execution**: MCP servers run locally on your machine
- **No External Communication**: Unless explicitly configured by you
- **User Control**: You control which MCP servers to install and use

## ⚖️ **Your Rights**

### Data Control
- **Full Access**: Complete access to all your data
- **Export**: Export all your data at any time
- **Deletion**: Delete all data by uninstalling the application
- **Modification**: Modify any stored data directly

### No Account Required
- **No Registration**: No account creation required
- **No Login**: No login or authentication required
- **Anonymous Use**: Use completely anonymously

## 🛡️ **Security Measures**

### Local Security
- **File Encryption**: Sensitive configuration files are encrypted
- **Access Control**: Restricted file permissions on all data
- **Memory Protection**: Sensitive data cleared from memory after use
- **Secure Storage**: API keys stored in system keychain/keyring

### Network Security
- **HTTPS Only**: All network connections use HTTPS
- **Certificate Validation**: SSL certificate validation enabled
- **No Man-in-the-Middle**: No proxy or interception capability

## 📞 **Contact Information**

### Privacy Questions
- **GitHub**: Create an issue on our GitHub repository
- **Response Time**: Within 48 hours

### Data Requests
- **Data Export**: Request data export at any time
- **Data Deletion**: Instructions for complete data removal
- **Questions**: Any privacy-related questions

## 🔄 **Policy Updates**

### Update Process
- **Notification**: Policy updates will be posted on GitHub
- **Version History**: Complete version history maintained
- **User Notification**: Significant changes announced via release notes

### Effective Date
This privacy policy is effective as of August 14, 2025.

## 📄 **Compliance**

### Legal Compliance
- **GDPR Compliant**: Designed to be compliant with GDPR requirements
- **CCPA Compliant**: Compliant with California Consumer Privacy Act
- **Local Laws**: Compliant with local data protection laws

### Open Source
- **Transparency**: Full source code available for review
- **Audit**: Open to security and privacy audits
- **Community**: Community-driven privacy improvements

## 🏛️ **Legal Basis**

### Jurisdiction
This privacy policy is governed by the laws of the jurisdiction where the software is developed and distributed.

### Changes to Policy
Any changes to this privacy policy will be posted on our GitHub repository and will take effect immediately upon posting.

---

**Last Updated**: August 14, 2025  
**Version**: 1.0
