# AetherDesk Privacy Notice

Status: paid-pilot draft.

## Local-first default

AetherDesk is designed to run on the customer's Windows machine and keep operational state local by default.

Local state includes:

- receipts under `artifacts/`
- MCP hook toggle intent under `artifacts/aetherdesk_mcp_hooks.json`
- System Access receipts under `artifacts/aetherdesk_system_access_receipts.jsonl`
- portable startup logs under `artifacts/portable_logs`
- browser localStorage state for the desktop shell

## Secrets

AetherDesk must not display, log, receipt, or package secret values.

Connector status may report whether an environment variable exists, but not its value.

## Network access

AetherDesk can expose local HTTP/MCP routes on `127.0.0.1` by default.

LAN/public tunnel modes must be explicit operator actions and are not enabled by the default portable launcher.

## Customer data

Workspace file browsing and PowerShell inspection are local actions. If a user enables external connectors, the owning connector's privacy and OAuth boundary applies.

## Support

Support bundles should include logs, manifests, and receipts only after the customer has reviewed them for sensitive content.
