Privacy Policy

Data Avalon stores on your Mac

Avalon stores projects, conversations, agent and workflow configuration, runtime installation records, approval history, application preferences, and user-managed agent memory in its private application-data directory.

Saved memory is off by default. Automatic memory extraction also remains off until you enable saved memory and accept the extraction privacy disclosure. You can inspect, edit, export, disable, and delete saved memory in Settings.

Provider API keys, connector tokens, and OAuth credentials are encrypted with Electron safeStorage, backed by your operating system’s credential protection. Avalon stores public connector definitions separately from credentials.

Data sent to other services

When you select a model provider, agent runtime, connector, or web feature, Avalon sends the information required to fulfill your request to that service. Those services process data under their own terms and privacy policies.

When saved memory or cross-agent handoffs are enabled, relevant records may be included as context in a request sent to your selected agent runtime or model provider. Avalon does not send memory to a separate extraction service.

During setup, Avalon downloads only the agent runtimes you select from the source shown in the installation screen. Standard network metadata, including your IP address and user agent, may be visible to that source.

Analytics

Avalon does not send product analytics or advertising identifiers. Crash reports and diagnostics are not uploaded automatically.

Your controls

Disabling saved memory stops new writes, retrieval, and context injection, but it does not delete existing records. Deletion removes a record from future use but cannot retract context already delivered to an external agent runtime or model provider.

You can remove conversations, projects, connectors, provider credentials, and installed runtimes from your Mac. Removing Avalon may leave its application-data directory in place so an update or reinstall can recover your work.

Security and contact

Report security issues through the private security advisory form in the Avalon GitHub repository. For privacy questions, open a repository discussion or issue without including private information.