Privacy Policy

Last updated: April 10, 2026

Our Core Promise

Your data is yours. We never train on your data. Period.

1. What We Collect

Account Information

When you sign up, we collect your name and email address. This is stored securely and used only for account management and communication.

Usage Data (minimal)

We track aggregate usage metrics (total messages sent, not content) for service monitoring. We do NOT log or store the content of your conversations.

2. What We Do NOT Collect

Chat message content — stored locally on your device only
Project files — stored in your local .maestro/ directory
API keys — encrypted locally, never transmitted to us
Browsing history or tracking data
Location data beyond what you request (weather, news)

3. Local-First Architecture

Maestro AI is built local-first. In the Free tier, all data stays on your machine:

Chat history → browser localStorage
Project context → .maestro/ files on your computer
Settings and preferences → browser localStorage
API keys → encrypted local storage

4. When Data Leaves Your Device

Your message content is sent to an AI model only when you send a chat message. Depending on your configuration:

Local models — data goes to your own Ollama instance. Never leaves your network.
BYOK cloud models — data goes to the provider you chose (OpenAI, Anthropic, Google) using YOUR API key. We are not a party to that transaction.

5. No AI Training

We do not use your data to train AI models. We do not sell your data. We do not share your data with third parties for any purpose other than providing the Service.

6. Data Deletion

Since your data is stored locally, you can delete it anytime:

Chat history: click "Clear" in the dashboard
Project data: delete your .maestro/ folder
Account: contact us and we will delete your account information within 30 days

7. Cookies

We use a single session cookie to keep you logged in. We do not use tracking cookies, analytics cookies, or advertising cookies.

8. Children

Maestro AI is not intended for users under 18. We do not knowingly collect data from minors.

9. GDPR / CCPA Rights

You have the right to: access your data, correct your data, delete your data, port your data, and opt out of data processing. Since we store minimal data server-side, most of these rights are exercised locally on your device.

10. Changes

We may update this policy. Material changes will be communicated via email or in-app notification.

11. Contact

Privacy questions? Contact privacy@surgexi.com