Privacy Policy

Last updated: 2026-08-10

Local-first

AiOffice is local-first by design: your files are parsed by a local engine, and file vectors default to a local Qdrant — not the cloud.

Cloud API keys live only on the server; the client never holds them (red line #7).

What we collect

With your explicit consent (the banner on first visit), we use anonymized product analytics (PostHog) and crash monitoring (Sentry) to improve the product.

Collection is limited to non-sensitive metadata: locale, page path, platform, version, and events like download, language switch, and consent choice.

What we never collect

We never collect your file names, file contents, or directory paths in plain text (red line #5).

Any potentially sensitive field is desensitized or hashed on the client before reporting.

Your rights

You can decline or withdraw analytics consent at any time via the banner; declining means no reporting requests are made.

Anonymized events are not directly linked to your identity.