Trust & privacy

In short

Actofy is local-first by default. Your project starts on your Mac, important actions require approval, and hosted collaboration only happens when you choose it.

Principles

• Local-first by default - project state and run metadata stay on your Mac unless you choose hosted runners.
• No surprise data sharing - anything that sends project content or prompts outside your process uses a named surface visible in Settings.
• You control model accounts - your relationship with OpenAI or Anthropic is direct under their API terms.
• Claims match shipped behavior - roadmap items are labeled honestly.

What leaves your machine

• Prompts and tool outputs sent to the model provider through the key you configure
• OAuth tokens for source control — stored encrypted in your local credential vault
• Optional: hosted sync, team audit logs, and cloud runners when you subscribe to Team+ tiers

What we do not do

• We do not use your proprietary codebase to train our models
• We do not silently send repo content to undisclosed third parties
• We do not merge or deploy without explicit approval unless your workspace policy explicitly allows it

For your engineering team

Technical artifacts can include source code, diffs, tool output, terminal logs, model prompts, approval decisions, and validator reports. Local tier data is stored locally by default; hosted tiers may sync selected data for collaboration.