Privacy Policy

1. On-Device Architecture & Execution

Synergoi runs as a local engine and desktop client directly on your personal computer. All conversation transcripts, SQLite database ledgers, working trees, and context handoff packs are stored in your local application data directory (e.g., ~/Library/Application Support/Synergoi on macOS).

• No Code Uploads: Your repositories, git branches, file contents, and diffs are never uploaded to Tracewyn servers.
• No Intermediate Proxies: Inference is orchestrated by spawning official local agent binaries on your machine via the Agent Client Protocol (ACP). Communication occurs locally between the desktop app and the CLI.
• Context Packs: When switching providers mid-thread (the Baton handoff), the compiled briefing file is written to local application data—never into your git repository—and all detectable secret tokens/API keys are redacted before persistence.

2. Provider Credentials & Authentication

Synergoi operates on a Bring Your Own Subscriptions (BYOS) model. We do not host or manage your AI provider accounts.

• Official Local Keychains: Authentication for Claude, OpenAI Codex, SuperGrok, and Cursor is handled directly by each provider’s official CLI (e.g., claude auth login, codex login, grok login). Credentials reside in the vendor's default OS Keychain or configuration folders.
• Multi-Account Directory Isolation: When connecting secondary accounts (such as a Work profile alongside a Personal profile), Synergoi isolates configuration environments locally under secure user permissions (0600).
• No Credential Transmission: Tracewyn never receives, transmits, or logs your vendor passwords, API keys, or OAuth tokens.

3. Local Voice Dictation (Whisper.cpp)

Voice input in Synergoi is powered by a bundled on-device whisper.cpp engine.

• Audio captured from your microphone is sampled in-memory at 16kHz PCM and transcribed strictly on your local CPU/GPU.
• Zero audio buffers, voice waveforms, or temporary WAV files are ever transmitted over the network.
• Model downloads for voice dictation occur directly from verified, checksum-validated Hugging Face / GitHub release mirrors upon explicit user request in Settings.

4. Attachments & Image Scrubbing

Images pasted or dropped into the composer are content-addressed and saved locally by SHA-256 hash. Before any AI provider sees an image, all EXIF/metadata tags are stripped and long edges are normalized to prevent unintended location or device data leakage.

5. Licensing & Billing Data

Payments and subscriptions are processed by our merchant of record, Lemon Squeezy.

• Payment Information: Tracewyn does not collect, process, or store credit card numbers or billing addresses. All transactions are securely handled by Lemon Squeezy.
• License Validation: To activate and validate your SynergoiPro license, the local engine communicates with Lemon Squeezy's License API over HTTPS. Validation snapshots verify only order ID, active status, and license nonces.
• Offline Grace Period: Validated licenses feature a 72-hour offline grace period, ensuring you can continue coding without an active internet connection.

6. Data Ownership & Privacy Rights

Because all project data resides locally on your device, you maintain total ownership and physical custody of your data at all times:

• Export & Portability: All session transcripts and ledgers are stored in standard SQLite databases and JSON files that you can inspect, backup, or delete at will.
• Complete Deletion: Deleting the application data folder permanently purges all threads, context packs, access rules, and settings from your machine.
• GDPR & CCPA Compliance: We honor all international data privacy protections. Because we do not collect personal usage telemetries, there is no personal data footprint to monetize or sell.