04 // DATA SOVEREIGNTY CHARTER

Sovereign Privacy Policy

“If we don't store your data, we can never leak it, sell it, or be subpoenaed for it.”

TRANSPARENCY AUDIT

Where Your Data Actually Lives

Data AssetPhysical Storage LocationSent to PolySwitch?Status
Source Code & Local Repositories100% On Your Local SSDNever (Zero Bytes)SOVEREIGN LOCAL
Model API Keys (Claude, OpenAI, xAI)OS Encrypted Keychain (Apple / DPAPI)Never (Direct TLS to LLM)ENCRYPTED ON-DEVICE
Prompt History & Agent TranscriptsLocal SQLite / JSON CacheNever (Zero Cloud Storage)100% PRIVATE
Browser Automation & CookiesLocal Headless Chromium SandboxNeverSANDBOXED
License Verification EmailCloud Database (Supabase / Postgres)Yes (Only Email & Pro Status)MINIMAL AUTH
ARTICLE 01ZERO CLOUD LOGGING

The Zero Cloud Custody Guarantee

PolySwitch was engineered around a simple tenet: we do not want your proprietary data. We do not maintain cloud servers that ingest, parse, log, or cache your prompt inputs, codebase files, or agent tool arguments. When you direct a bot to inspect a local repository, run a headless web scraper, or execute a terminal command, that operation executes natively on your CPU, memory heap, and operating system kernel. Nothing is forwarded to PolySwitch servers.
ARTICLE 02ZERO CLOUD LOGGING

OS Keychain Encryption for API Keys

Your third-party model credentials (such as Anthropic, OpenAI, or xAI API keys) are stored strictly within your operating system's native cryptographic vault: - macOS: Apple Keychain (Hardware Secure Enclave backed) - Windows: Windows Data Protection API (DPAPI) - Linux: Secret Service API / GNOME Keyring PolySwitch client binaries never upload your API keys to our servers. All API requests are dispatched via direct TLS 1.3 encrypted connections directly from your desktop machine to the official model provider endpoints.
ARTICLE 03ZERO CLOUD LOGGING

Website Information We Do Collect

To administer software licenses and provide billing support, our website (polyswitch.dev) collects the minimum necessary data: - Authentication Data: Your name and email address when you sign in via Google OAuth. - Billing Records: Transaction IDs and payment confirmation timestamps generated by Razorpay. We never store credit card numbers, CVVs, or bank credentials. - Essential Cookies: Strictly necessary session tokens to keep you logged in to your user dashboard.
ARTICLE 04ZERO CLOUD LOGGING

No Keystroke Logging or Screen Surveillance

When you enable PolySwitch's native computer control feature, the application uses local Chromium DevTools Protocol (CDP) and desktop accessibility APIs to interact with apps on your screen. PolySwitch never transmits screenshots, video streams, or keystroke recordings off your physical machine. All computer vision analysis happens through your connected LLM provider using your own API credentials.
ARTICLE 05ZERO CLOUD LOGGING

Diagnostics & Crash Telemetry (Strictly Opt-In)

In the event of an unhandled runtime crash, you may optionally submit a diagnostic report. Diagnostic reports include only the error stack trace and operating system version (e.g., macOS 15.1, Windows 11 23H2). Diagnostic telemetry is stripped of all file paths, repository names, prompt contents, and API credentials.
ARTICLE 06ZERO CLOUD LOGGING

Data Erasure & Account Termination

You possess the unilateral right to delete your account at any time. From your user dashboard, selecting "Delete Account" immediately and permanently wipes your email address, license records, and session cookies from our authentication databases. To remove local desktop data, simply uninstall the application and delete the local cache folder (~/.polyswitch or %APPDATA%/PolySwitch).
ARTICLE 07ZERO CLOUD LOGGING

Contact Our Data Privacy Officer

For any inquiries regarding data protection, privacy compliance, or regulatory inquiries under GDPR, CCPA, or India's Digital Personal Data Protection Act (DPDPA), contact our dedicated engineering privacy desk directly: Email: [email protected] Response Turnaround: Within 24 business hours.