Privacy Policy — Lienox / Lienox

DRAFT — not legal advice. Review with qualified counsel before publishing. Last updated: 2026-06-04

1. Local-first by design

Lienox runs on your machine. Your projects, files, conversations, agent definitions, and API keys are stored locally (local database and config), not on our servers.

2. What is processed and where

Prompts & context you send to an agent are transmitted to the LLM provider you choose, using your API key (BYOK). That processing is governed by the provider's privacy policy. We do not receive or store that content on our servers.
API keys you enter are stored locally on your device and used only to call the provider you selected. Do not share your configuration files.
Browser control / computer use: when you ask an agent to drive your browser or run commands, it operates within your local session. Any data it reads is processed locally and/or sent to your chosen provider per your instructions.

3. What we collect

Account data (only if you create a cloud account for licensing/billing): your email and a bcrypt-hashed password. We never store your password in plain text. Billing is processed by Stripe; we do not store card numbers.
Diagnostics/telemetry (opt-in): if you enable it, we collect anonymous product events (feature usage, error and crash reports) associated with a random device identifier, plus basic app/OS version. Telemetry never includes prompt content, file contents, conversations, or API keys. You can disable it at any time in the app settings.

We do not sell your data.

4. Third‑party providers

Using BYOK means your content is processed by the LLM provider you configure (e.g. Anthropic) using your own API key. That processing is governed by the provider's privacy policy — review it before sending sensitive data.

5. Security

We use reasonable measures to protect locally stored data, but you are responsible for the security of your device and accounts.

6. Your choices

You can delete local data by removing the app's data directory.
You can revoke provider access by removing your API keys.

7. Children

The Software is not directed to children under the age required by your jurisdiction (e.g. 13/16).

8. Contact

Privacy questions or requests: lienox.app@gmail.com.