Privacy and policy

This system may collect highly sensitive work-session content. A workspace owner configures the policy; each device user sees and acknowledges that policy during connection. The server enforces the same policy for reads, search, exports, comments and MCP access.

• Collection: metadata-only or full session content, as explicitly configured.
• Redaction: an explicit setting; “none” means no hidden masking. Known-secret-pattern filtering is never a complete guarantee.
• Visibility: the configured audience determines who can read a session. Upload tokens do not grant read access.
• Storage: real transcripts, credentials, connection files and staff mappings belong in the private workspace, never the public source repository.

Before enabling full content for a team, agree on the workplace policy, retention and who can access it. Review the actual workspace policy text; this public page does not override it. Project leaders should discuss coaching with employees and keep human review in any employment or pay decision.

See the full security model and deployment guide.