Privacy Policy
Last updated: 8 September 2026
OIOXO is operated by Aradsoft Ltd. (Canada), the controller of the limited personal data described here. OIOXO is built so that the data that matters — your code, your prompts, your keys — never touches our servers. This policy lists what we do process, why, and what we deliberately cannot see. The technical walkthrough is at Privacy by design.
1. What never reaches our servers
- Your code and project files. They live in your browser or your local folders. AI generation runs on your device.
- Your prompts and the AI’s output. Processed locally, or sent directly to a provider you configured (see §4).
- Your API keys and Git tokens. Encrypted in a secure store on your device, under a key that cannot leave your browser or the desktop app. A Git token is forwarded to the Git host with a push, pull or clone (see §4) and is not stored by us.
2. What we collect, and why
| Data | Why |
|---|---|
| Email and login credentials (or OAuth identity) | Your account. |
| Usage meter counts — token counts for OIOXO models, timestamps, plan tier, a device-bound entitlement token | Enforcing the free allowance and Pro entitlements fairly across devices. Counts only — never content. |
| Usage beacons — a handful of stage events (boot, model ready, first agent run, a crash) with the stage name, time since boot, CPU core count, whether the tab is cross-origin isolated, whether the layout is mobile, and the app version. Never a prompt, a file name or a path. | Knowing whether the product boots and works on real devices. Opt out under Settings → Privacy → Usage beacons; then nothing about your session leaves the device. |
| Problem reports — only if you send one from Help → Report a problem: your summary and details, plus a diagnostic line (version, tier, plan, model label, core count, browser, last error message). No code, no prompts. | Answering you on your account. |
Web search queries — only when you turn on web search under Settings → Agent: the query the agent wrote, relayed through oioxo.com/api/search | Returning search snippets to the agent. The query is the only thing sent. |
| Billing records (handled by Stripe) | Pro subscriptions. We never see or store card numbers. |
| Standard server logs (IP, request path, user agent), short-lived | Keeping the service up and abuse out. |
We never train on your work. We do not use your code, prompts, or AI output to train, fine-tune, or improve any model — not on the free plan, not on any plan. We also do not sell personal data or run third-party advertising trackers.
3. What stays on your device (but is data about you)
Settings, chats, projects in browser storage, checkpoints, project rules and downloaded models are stored by your browser or the desktop app on your machine. Clearing site data removes them; we have no copy.
4. Third parties you choose to involve
- Your own key (Anthropic, OpenAI or any OpenAI-compatible endpoint): your browser calls the provider directly with your key; their privacy terms govern that traffic. Our servers are not in the path.
- Git hosts (GitHub, GitLab, Bitbucket, Codeberg) and GitHub Pages publishing: browsers cannot speak Git’s protocol directly, so push, pull and clone travel through our smart-HTTP proxy at
oioxo.com/api/git. Your token is forwarded to the host with the request and is not stored; the repository bytes pass through and are not kept. - Stripe: payment processing for Pro. We never see or store card numbers.
- Model delivery: on-device models are downloaded from Hugging Face and our release CDN. These see the request, not your code.
5. Cookies and local storage
We use a session cookie to keep you signed in. We do not use third-party advertising or cross-site tracking cookies. Most of what OIOXO remembers — settings, projects, chats and downloaded models — is kept in your browser’s storage on your device, not in cookies on our servers. Clearing site data removes it.
6. Retention and deletion
Account and metering records are kept while your account exists. Email support@oioxo.com to delete your account; we remove your personal data within 30 days, except minimal records we must keep (e.g., tax/billing history). Your local data is already under your control.
7. Your rights
Depending on where you live, you may have rights to access, correct, export, delete, or restrict the processing of the personal data we hold about you, and to object to it or withdraw consent. Exercise any of them at the same address above. Since we hold so little, these requests tend to be short conversations. You may also have the right to lodge a complaint with your local data-protection authority.
8. International transfers
We operate the Service from our own infrastructure; where account or billing data is processed in another country, we rely on appropriate safeguards as required by applicable law. Because your code and prompts stay on your device, they are not transferred by us at all.
9. Children
OIOXO is not directed at children under 13 (or the minimum age of digital consent where you live), and we don’t knowingly collect their data. If you believe a child has provided us personal data, contact us and we’ll delete it.
10. Changes
If this policy changes materially, we’ll announce it in the changelog and update the date above. Continued use after a change means you accept the updated policy.
11. Contact
Questions about your privacy or this policy? support@oioxo.com.