Overview
This Privacy Policy explains how BenAgent is designed to handle data. The short version: BenAgent is local-first, does not rely on a BenAgent server, and does not add third-party tracking.
The landing page is also intended to be simple: no account signup wall, no behavioral ad network, and no analytics SDK requirement for the product promise described here.
What stays on your Mac
BenAgent settings, selected agent configuration, runtime status, local conversation records, and app preferences are designed to live on your Mac.
Provider secrets should be stored through macOS Keychain. They should not be copied into a BenAgent-hosted account because there is no BenAgent cloud account service required for the app.
What can leave your device
BenAgent itself does not send your prompts to a BenAgent server. If you configure an agent endpoint and choose to send a message, the app should send that request to the endpoint you selected.
That configured endpoint is controlled by you. Review the privacy and security terms for any provider or endpoint you connect.
What we do not collect or share
We do not collect prompts, transcripts, documents, API keys, provider responses, or conversation history on a BenAgent server.
We do not sell personal data, share product usage for behavioral advertising, or send your work to third-party analytics services.
Permissions
BenAgent may ask macOS for permissions such as microphone or speech access when you enable voice features. These permissions are controlled by macOS and can be changed in System Settings.
BenAgent does not forward raw microphone data to a BenAgent server. Voice features should be treated as local app features plus any system services or configured endpoints you choose to use.
Retention and deletion
Because BenAgent is local-first, deleting local app data, clearing local conversations, removing provider credentials from Keychain, or uninstalling the app are the main controls for data retained on your Mac.
BenAgent cannot delete data from an endpoint you configured yourself. Use that provider's own controls for any data sent directly to it.
Changes
If this policy changes, the updated version should be posted with a new updated date. Material changes should keep the same plain-language privacy stance visible.