04 // DATA SOVEREIGNTY CHARTER
Sovereign Privacy Policy
“If we don't store your data, we can never leak it, sell it, or be subpoenaed for it.”
TRANSPARENCY AUDIT
Where Your Data Actually Lives
| Data Asset | Physical Storage Location | Sent to PolySwitch? | Status |
|---|---|---|---|
| Source Code & Local Repositories | 100% On Your Local SSD | Never (Zero Bytes) | SOVEREIGN LOCAL |
| Model API Keys (Claude, OpenAI, xAI) | OS Encrypted Keychain (Apple / DPAPI) | Never (Direct TLS to LLM) | ENCRYPTED ON-DEVICE |
| Prompt History & Agent Transcripts | Local SQLite / JSON Cache | Never (Zero Cloud Storage) | 100% PRIVATE |
| Browser Automation & Cookies | Local Headless Chromium Sandbox | Never | SANDBOXED |
| License Verification Email | Cloud Database (Supabase / Postgres) | Yes (Only Email & Pro Status) | MINIMAL AUTH |
ARTICLE 01ZERO CLOUD LOGGING
The Zero Cloud Custody Guarantee
PolySwitch was engineered around a simple tenet: we do not want your proprietary data. We do not maintain cloud servers that ingest, parse, log, or cache your prompt inputs, codebase files, or agent tool arguments.
When you direct a bot to inspect a local repository, run a headless web scraper, or execute a terminal command, that operation executes natively on your CPU, memory heap, and operating system kernel. Nothing is forwarded to PolySwitch servers.
ARTICLE 02ZERO CLOUD LOGGING
OS Keychain Encryption for API Keys
Your third-party model credentials (such as Anthropic, OpenAI, or xAI API keys) are stored strictly within your operating system's native cryptographic vault:
- macOS: Apple Keychain (Hardware Secure Enclave backed)
- Windows: Windows Data Protection API (DPAPI)
- Linux: Secret Service API / GNOME Keyring
PolySwitch client binaries never upload your API keys to our servers. All API requests are dispatched via direct TLS 1.3 encrypted connections directly from your desktop machine to the official model provider endpoints.
ARTICLE 03ZERO CLOUD LOGGING
Website Information We Do Collect
To administer software licenses and provide billing support, our website (polyswitch.dev) collects the minimum necessary data:
- Authentication Data: Your name and email address when you sign in via Google OAuth.
- Billing Records: Transaction IDs and payment confirmation timestamps generated by Razorpay. We never store credit card numbers, CVVs, or bank credentials.
- Essential Cookies: Strictly necessary session tokens to keep you logged in to your user dashboard.
ARTICLE 04ZERO CLOUD LOGGING
No Keystroke Logging or Screen Surveillance
When you enable PolySwitch's native computer control feature, the application uses local Chromium DevTools Protocol (CDP) and desktop accessibility APIs to interact with apps on your screen. PolySwitch never transmits screenshots, video streams, or keystroke recordings off your physical machine. All computer vision analysis happens through your connected LLM provider using your own API credentials.
ARTICLE 05ZERO CLOUD LOGGING
Diagnostics & Crash Telemetry (Strictly Opt-In)
In the event of an unhandled runtime crash, you may optionally submit a diagnostic report. Diagnostic reports include only the error stack trace and operating system version (e.g., macOS 15.1, Windows 11 23H2). Diagnostic telemetry is stripped of all file paths, repository names, prompt contents, and API credentials.
ARTICLE 06ZERO CLOUD LOGGING
Data Erasure & Account Termination
You possess the unilateral right to delete your account at any time. From your user dashboard, selecting "Delete Account" immediately and permanently wipes your email address, license records, and session cookies from our authentication databases. To remove local desktop data, simply uninstall the application and delete the local cache folder (~/.polyswitch or %APPDATA%/PolySwitch).
ARTICLE 07ZERO CLOUD LOGGING
Contact Our Data Privacy Officer
For any inquiries regarding data protection, privacy compliance, or regulatory inquiries under GDPR, CCPA, or India's Digital Personal Data Protection Act (DPDPA), contact our dedicated engineering privacy desk directly:
Email: [email protected]
Response Turnaround: Within 24 business hours.