---
title: "Privacy & data"
description: "Know what stays on your Mac, what goes to an Assistant, and what your account stores."
locale: "en"
canonical: "https://orylo.io/en/docs/privacy-security"
product_status: "in-development"
last_reviewed: "2026-10-12"
---

# Privacy & data

Know what stays on your Mac, what goes to an Assistant, and what your account stores.

<a id="local-first"></a>

## Local work stays local by default

Conversations, attachment snapshots, local Assistant configuration, Teams and Actions are stored on your Mac. They are not synchronized through your Orylo account.

Local storage does not mean every Assistant is offline. An Agent or model provider can send your request to its own services according to its configuration and policies.

<a id="sending"></a>

## When you send a request

Your chosen Assistant receives the request and the context supplied to it, including applicable instructions, selected attachments. Inspect the draft and Assistant configuration before sharing sensitive material.

Orylo’s account backend is not a proxy for Agent requests, replies, files, captures, or workspaces. External tools and providers apply their own privacy and retention rules.

<a id="account-data"></a>

## What online account services store

Orylo online services handle identity, purchase entitlement, device licensing, and feedback. Device records include an installation identifier, a public key, activation times, and the latest app and Mac configuration used for compatibility statistics.

Configuration includes macOS version, architecture and chip model, Mac model identifier, and app version/build. Orylo does not collect the hardware serial number or computer name for licensing. Device records are removed when the account is deleted.

<a id="control"></a>

## Share less, deliberately

Remove unnecessary attachments, and inspect tool permissions. Optional feedback diagnostics exclude prompts, replies, file paths, file contents, window titles, tokens, API keys, and environment variables.

Read the [Privacy Policy](https://orylo.io/en/privacy) for the formal terms. Deleting local content does not retract data already delivered to an external Agent or service.

## Continue exploring

- [Permissions & control](https://orylo.io/en/docs/permissions)
- [Account & devices](https://orylo.io/en/docs/account)