What we collect and what we don't.
The short version
Replace OS is local-first. We don't see your DM threads, your employees' memories, or what the agents are working on. What lives on your machine stays on your machine.
What stays on your machine
- DM threads with each employee.
- Per-employee structured memory.
- Company state — which employees you hired and their hierarchy.
- Hire decisions, peer-discussion transcripts, exported synthesis files.
- Any files agents read, write, or modify inside their sandboxed root.
What we send to the LLM provider
For each task you ask an employee to do, the runtime sends the employee's system prompt, recent context, the user message, and any tool-call results to a managed LLM provider over a provider-agnostic transport. We do not log or persist those requests on our infrastructure.
Telemetry
In dev and beta we do not collect telemetry of any kind. If we ever add telemetry, it will ship as opt-in, will include only structural events (which employee, success/failure, tokens, duration), and will never include prompt or response content.
Cookies and trackers
The marketing website (this site) does not use third-party analytics or advertising trackers. If we add basic anonymous usage measurement, we will document it here.
Contact
Questions: privacy@replace-os.local.