Privacy
Local first, and precise about the one part that is not.
What AI17Z keeps on your machine, and exactly what the optional Studio service stores.
AI17Z core
The runtime is local. Your agents, events, jobs, memories, relationships, browser sessions, provider keys and master key live on your machine. AI17Z core talks only to the services you configure, with the credentials you supply.
A remote model provider — OpenAI, Anthropic, OpenRouter and so on — receives the context AI17Z sends it: the incoming post, the conversation around it, the retrieved memories and the persona. That is how it answers. Use a local model through Ollama and nothing leaves your machine. See the core privacy document.
AI17Z Studio
Studio is optional, and it does have a database. If you create an account, it stores what it needs to run accounts, the marketplace and installation linking — and nothing from inside your agents.
| Studio stores | Why |
|---|---|
| Email, display name, password hash | Your Studio account |
| Sessions (browser description, a keyed hash of your IP) | So you can see and revoke sign-ins; IP is never used as identity |
| Linked installations (name, platform, AI17Z version, public key, last seen) | Seats, sync and revocation |
| Entitlements, reviews, reports | The marketplace |
| Wallet addresses you link and purchase records, including transaction hashes | Paid acquisition, which is public on-chain anyway |
| Publisher applications and listings | Verification and review |
| Gateway usage (which capability, when, outcome, size) | Quotas, abuse limits and billing for hosted capabilities |
| An audit log of administrative and security events | Accountability |
Studio does not
- receive your agents’ memories, prompts, conversations or provider keys — the marketplace does not need them;
- connect in to your machine: your installation calls out, when you ask it to;
- share your identity with publishers: a hosted plugin’s backend sees a per-plugin pseudonym for your installation;
- store a private key, or use your wallet as your identity;
- use third-party analytics or advertising trackers, or load fonts and scripts from other sites.
Questions or deletion requests: contact the Studio operators through the channels listed on the project repository. Account security is described on the Security page.